If I’m understanding correctly, the thief kept all addresses and their keys in something like Google Drive and the US gov simply reached in and took them.

Pro tip: it’s a bad idea to keep anything in cloud storage you wouldn’t mind sharing with the Feds