Exactly why it will be nearly impossible for any redistribution of funds even in the slim chance that they are ever recovered. In this case yes, the organizer of our local Bitcoin meetup was with them personally helping to migrate their funds off coldcard. When they loaded up the xpub in sparrow they discovered the outgoing txs together… funds had already been swept. Some people would definitely try to take advantage of this situation for sure. But yeah, sadly this one at least they have verified that the funds went to one of the known addresses of the attacker.