Why buy an account and not the tokens in the account? In the 5+ years I've been in cryptocurrency, I've never heard of someone transferring account ownership (instead of the tokens in the account) unless something shady is going on. Though you didn't technically buy a private key (thank you for clarifying) the result was the same: ownership of an account (which we're learning now may have been stolen) was transferred to you. I would have certainly asked why there was a hurry to sell instead of waiting for the tokens to be unstaked and transferrable. Did you get market rate or something below market rate? Was it too good to be true?
RE: EOS42 Statement on Block Producer Decision to Freeze 7 EOS Accounts