I'm glad he was caught. Kudos to Microsoft's security team for their help catching him. If he was arrested in July 2019 after being dismissed in 2018 after the investigation began, I wonder why he didn't run then?
Or perhaps he was very confident in hiding the fact he was behind the scam? Ie. He might have just claimed someone else must have guessed his test account credentials because the password was "1234".
That's not a sure deal, and leaving the familiar for a life on the run / looking over your shoulder is a pretty big thing to consider.