I agree with your comments about deposit controls and controls in general
They caught because of the deposit theft which means they have some controls in place.
Unfortunately churches are too trusting thinking everyone who works for them is honest. And second this person was a bad actor from the get go
Some treasurers resist oversight. They see it as meddling. You need multiple people with inquiry capability on all accounts.