When the coins were only worth a few million he could've cashed out then but now he's just in for permanent trouble.
In my opinion, there was a real (but vague) clue to his identity that was not a red herring: the IP leak in the debug logs he sent to Hal Finney. He used Tor most of the time but briefly slipped up and likely divulged his real, residential IP address. If that's the case, then he was living in California, possibly around the LA area, as of January 2009.
https://whoissatoshi.wordpress.com/2016/02/20/satoshi-in-cal...
If you dig through all of his forum posts, emails, and code, it's entirely consistent with a solo dev reading a bunch of papers, combining ideas (digital currency + hashcash), iterating on some software, and interacting with his community.
Sophisticated criminals who actually are interested in targeting you can play your shell game until they figure out who you are.