If he registered the domains to 'protect' them he should have contacted LE immediately afterwards to arrange the transfer. Not wait until the world finds out. It's easy to use that form of reasoning ("I only did it for protection") after others find out. But is such a person trustworthy? I have my doubts.