The context that keeps being missed here is the assumption that the Genesis UTXOs were accounts belonging to the Ada voucher buyers like a normal Byron address.
They were the last stage of redemption where the buyer would use information from the AVVM process and a recept in their email to reconstruct the private key and vend the Ada to a normal address they own and solely control. Every Genesis redemption uxto maps to a KYCed buyer. This allowed attain and the TGE to track who redeemed and got custody and who didn't.
After years and during the Byron to Shelley transition, it became clear that it made no sense to permanently preserve an onchain redemption mechanism for every wallet to support forever given its a legacy subset of users and also there was a high probability that the remaining unredeemed buyers either didn't know how or lost the ability to redeem.
So the redemption mechanism changed from onchain to offchain via the sweep. You're representing this as stealing funds. The buyer hadn't redeemed their funds. That's the entire point of the sweep.
This action was also taken for security reasons. Due to the closure of Attain, it was an open question if the original redemption mechanism was still secure. As the original buyers seemed unable to redeem, there was a growing probability that someone could have used social engineering or some attack vector to steal the funds.
The sweep reset the process and ensured all the remaining unredeemed buyers had an opportunity to go through compliance again to match them against the original sales data. This took years, local lawfirms, exchange partners, and great expense, but significantly reduced the risk of fraud.
The point of a closing audit report is to explain all of this and verify the claims systematically. Instead of waiting, you continue to slander and defame without any meaningful context or evidence. This is malicious behavior and has to stop. Wait until the audit report comes out and then comment.