Lots of conjecture in the comments about how he got caught. Too bad nobody read the article.

Web-based generative AI tools/chatbots

...

he created fake AI CSAM—but using imagery of real kids.

All the privacy apps in the world won't save you if you're uploading pics to a cloud service.