Another theory - the reason MyBitcoin came back briefly and returned some coins, was to get plausible deniability when spending the coins that were stolen.
Great point. And it might have worked, had all the coins been spent ASAP. But these recent spends from old MyBitcoin addresses aren't going to go unnoticed... I suspect the folks tracing them are going to hunt them to the end.