I don't think selling his account is consistent with the strong evidence that he died a couple of weeks after he posted asking for donations.
I'd think it's more likely that the person asking for donations wasn't actually Bruno, but the same scammer.
I see threads in the dev and tech sub all the time that are consistent with people being in possession of wallets that don't belong to them, trying to find the passphrase to steal the coin. I also see threads in the services marketplace sub of people offing huge bounties for cracking wallet passwords. My presumption has always been that these are people that purchased old hard drives/computers with encrypted wallet files and they are trying to steal the coin in the wallet files. If people do this with old computers, I don't see any reason why people wouldn't do this with found phones.
I haven't followed these sorts of threads closely but they're probably scammers or people who have bought a wallet from another scammer thinking there's riches to be found inside.
I believe the person who moved the coin is someone different than the person who posted the donation address because otherwise they would have no reason to move the coin.
They probably just kept the money there for as long as possible or until the attention died down on him a bit. Seems a mighty coincidence that the funds move then his account here reactivates. Looks to me like it was just his last ditch attempt to solicit more donations.