> Wouldn't the sheer number of coins involved make tumbling services almost useless.

Sure, if they were all stolen and tumbled at once. The descriptions of a cold storage "leak" suggest that if the loss was due to theft, it was a gradual over an extended period.