I believe the person who moved the coin is someone different than the person who posted the donation address because otherwise they would have no reason to move the coin. If you google Bruno's name, you will find his forum handles, which might lead someone to access bitcointalk on his phone.
Unless of course Bruno (on his death bed) never logged out of anything/apps emails, the phone itself... as he had lost movement in his right arm. By not logging out the next person to handle the phone could have innocuously browsed the phone's contents (perhaps looking for porn?? Ya never know) and stumbled upon the various browsers, wallet apps/email apps even text files labelled "stuff for my relatives after I die" and passed the phone on to a friend with some tec savy who dug down and found a 2011/12 charity that Bruno tried to get going and then concocted what we saw transpire over the last 36 hours.