I might have my doubts though, maybe along the way when he transferred it to a CEX, Binance. And we all know that Binance works with regulators and authorities and this is how they traced it back to the criminals. And not directly breaking the privacy-centric code of Monero. In any case, the hacker is already with the authorities and it's hard for Kivimäki even if he covers his track, but still it lead him to his bank account.
If the hacker used centralized exchanges, then he left a trail that would link the Monero to his identity. XMR's privacy features won't matter if you aren't cautious. I'd bet Finnish authorities will have a hard time finding the hacker if he would've used DEXs and/or P2P trading platforms. Lesson learned, I guess.
Hopefully, the Monero blockchain remains private enough to combat government surveillance. It's still the #1 privacy coin in the world (despite being widely unpopular in crypto land). Maybe it will be the only coin of its class that will stand the test of time?