If he’s using android , I’d say it’s a malware then…. Google employees wouldn’t have access to this file, but a malware on the phone could get access to the file , specially if google drive was installed on the phone, or windows computer. That’s just My guess….. but PLEASE, ask your friend to get it touch with Binance urgently. It will be easy to track the thief!!!! Very stupid one I should say tbh…. Let me know if he got in touch with Binance , im truly worried about him. Also, try account recovery , im not sure how it works, but there’s a way to recover the account AFAIK. Cheers