I fail to understand with multi-sig wallets how a pool operator can be so careless.
Clueless is right. Once is bad enough, but to have it happen again is just plain ridiculous, it makes no sense at all. It wouldn't surprise me if the pool operator had something to do with it - he's certainly got a history of scamming his miners.