You forgot to mention that it's highly profitable to scam your customers by stealing funds from the sold funded coins.
Did he save private keys and steal the funds or did he sell them unfunded while labelling them as funded? I feel like there's a distinct difference between the two.