Why do you release escrow if you suspect that someone is scamming you? P2P on CEXs provides you with a Bitcoin address that is completely controlled through the platform. exchange also possesses the account ID data. If you are defrauded, you must learn to avoid it in the future or create a buy or sell request and set your own rules.
Until I know the full details of the story, I'll be bold enough to say the person who was scammed was careless. It should be common knowledge that CEX P2P would be filled by scammers, that is why the platforms make different ways to make sure you're not scammed. If you follow the rules given by the platforms you'll hardly ever be scammed.
Bybit has a 15-minute transaction time and if the coin or the funds have not been transferred the transaction is canceled. When the other party says he has made the payment, you are to check if you've received and even before you release the coin, the platform warns that in no account should you release the coin unless you've confirmed payment and confirmed that the money is the actual amount you're to receive. So except the person was totally nonchalant about these measures, I don't see how he can be scammed.