Also somewhat reckless with mixing access to his personal finances with access to his work communications systems.

Even without agents being involved that’s a recipe for trouble.

It also seems likely that an employee who used company assets (tokens) for personal use would have been fired rather than writing a blog post about it.