Cross posting:
Now that you have agreed to receive the payment to the original address you were scheduled to receive payment to, I believe it would be inappropriate to continue to withhold/delay releasing the bitcoin held in escrow.
Not if the account is compromised and the current user is not the same as the one who made the loan. Quick and dirty wait to clean the account would be doing the above.
A signed message from either addresses is required before doing anything.