I reckon it would be fair to say that part of the reason why nobody wants to speak up is FEAR!
You make a good point.
However, I wonder whether the regulator would have done anything even if someone
had gone on record. For all we know, several people may have.
They took his medical/licence off him, what more can they do.
That's the part I respectfully disagree with. There was plenty they could do. Apart from anything else they could have stopped him advertising. Surely all they needed was footage of him flying a customer, evidence from two CASA officers that they saw him do it and the footage was a true record, and paperwork from the office showing that the customer paid. Law enforcement 101 stuff and no nasty dobbers required.
The true question is 'what more were they willing to do'?, and the answer would appear to be 'nothing.'