Loved this read and what suspicious findings in the smart contract.

As to your question: "If I can plot this using a free tool in 15 minutes, why do stake.com and bybit accept money from this account?"

1) This is blockchain-specific social engineering meaning that the victim unfortunately authorized and signed the immutable and irreversible transaction as opposed to funds behind directly stolen from out of a compromised device. While surprisingly it doesn't web the wallet and transfer private key ownership like I have seen in other malicious smart contracts, the lack there of is almost a ploy to get their victims to try again.

2) Without the direct channel of social engineering, the users would not gain enough confidence and conviction to send funds. The lack of filtering and categorizing for blockchain videos is terrible, most are scams and there are very minimal ways to report them, and still Youtube doesn't take/block the creators. That being said, after the funds are sent through meta mask, users are then subject to a further pit of problems in blockchain unrelated to the Youtube connection which should be address primarily in order to prevent the start to this scam from happening.

3) I would send it to https://x.com/zachxbt, or https://x.com/c7five as youtube has been terrible with any mediation to this, and they are the most accountable in my opinion.