What can we also do to better ourselves and avoid such situation? Is there anything he could do do avoid this?
Use cold storage safer, i.e. transfer tx via images, not USB stick between cold and hot storage or simply use hardware wallet.
Make sure the private keys have never been and never will be on a computer that will go online, not even for printing them.
This kind of precautions should at least keep the cold storage safe.