You're all missing a key detail. It's not really about the cash, it's about the Bitcoin. If someone knows you have Bitcoin, and they successfully rob you, they can do so anonymously. No one is ever going to go for your banking app, as what they will do? Incriminate themselves by transferring your balance to their name? Bitcoin, on the other hand, is transferred to a pseudonymous address. That's the difference between the risk of a cash ATM and a Bitcoin ATM.
You act like the criminals have computer science degree and they understand every technical thing about Bitcoin. Most criminals don't even understand that, I often hear criminals use centralized exchanges to withdraw their coins.
They are using intimidation mostly, in my opinion.
Other than that, they are looking for the value at stake, not for the security of their ransack that would aquire in case of success.
But yeah, using CEXes afterward - it's a no brainer to get yourself into a discussion with authorities from said exchange.