If someone like that is not using multi-sig or a hardware wallet then they are asking for trouble.
Hate to say it, but he is a big freaking target for hacks, not even to get to his
BTC but to get access to what else he has access to in terms of development and coding and private discussions with others. Getting what he had in his hot wallet on his workstation is probably a bonus. As he posted his implementation of Knots may have been compromised. That could have been a much bigger target.
-Dave