a lot of autonomy
Seems a big lack of oversight if someone can make 100k bitcoin payments, get NDA created (assuming legal experts were used ratger than randomly tweaking a proforma one).
Where was the oversight (yes, a very senior position, but those roles are not above inspection / rigorous audit - often a rogue "high up" can do a lot more damage to a company than someone in a less elevated position)