If it was just for CP stuff they probably could have come anytime in the last decade. I suspect he knew he was targeted by them. How ironic would it be if they planted it on his computer to frame him and get a warrant, but he was in IT and noticed it? This would certainly cause enough paranoia to sit there watching your doorbell cam with a loaded gun.