Why does it matter if he deleted the credentials? As soon as anybody was able to get the credentials them, you'll have to make the assumption that others have b

Why does it matter if he deleted the credentials? As soon as anybody was able to get the credentials them, you'll have to make the assumption that others have been able to do the same. And that means rotating all your credentials the very same day you learn about that happening. Why does it make a difference then if he still has stale credentials?