I understand why some less technical pedes here might be willing to hold onto any straw and a piece of slightly vague information here as the absolute truth, but let's be honest here, at least someone who has an IT background...
The videos of the USB guy show nothing at all, just copies of data from one machine to another, today's screen shots of some alleged fraud with the OneDrive screen shots from 11/23 is complete implausible hoax.
If you still want to believe this guy, it's your call, but I can't sit around and clap while knowing that this is absolutely nothing but an attempt to shoot in the dark.
Open to any constructive discussions.
100%
This is noting more than reviewing data extracted from the system unless something more can be proven from the limited information.