It is debatable.
People had a lot of time to withdraw their Steem. Many of them forgot about their Steem apparantly. But selling other people's tokens is not a fair way of making profits IMO.

I think it is more fair if they had burned the 4 million Steem.