Having a limited formal education in digital forensics and computer hacking, the notion that Nick needs to incriminate himself by admitting to anything in order for there to be a "prosecutable case" is baffling to me.
The real distinction is the one between having a "prosecutable case" and having a case
worth prosecuting. Busting a crack den with children inside that's almost definitely being used for distribution is worth it. Adjudicating gay Internet drama at the federal level because one queer exposed his former fag lover's jerking off to Twister porn is not, even if it's a slam dunk case. From the prosecutor perspective, Nick's case, even if we hate to admit it, could be characterized as an isolated incident. Prosecuting it arguably doesn't prevent future criminality and therefore doesn't warrant the limited resources of prosecutors.
Even if Moody and Melton are IDF level ultra-hackers, Nick is not and Nick almost definitely permanently incriminated himself the moment he committed the crimes. He probably used the Google built-in mechanisms to extract account information so they'll know where and when it was extracted and it'd be trivial to establish that he wouldn't have had permission to extract that information. But that still requires some work, and even trivial work requires incentive.
There's no incentive here. No one at the agency is going to dap you up because you did the extra legwork on proving that homosexual lawyer humiliated his butt buddy to 20 onlookers. They care more about interstate commerce issues anyways. If it was an executive at Target whose account was left logged in and Nick accessed that for corporate espionage that we all found out about, he'd already be in cuffs. Same "crime" (hypothetically), different motivation to prosecute.
Circling back to Moody and Melton, allowing someone else to connect to the device and commit the crime does not prevent culpability. If you allow someone to connect to your device, you're authorizing their access, which would include access to Aaron's information. That's the same reason why if a pajeet scammer accesses your computer remotely and then drains your bank accounts, you can't do anything about it... because you foolishly authorized them to take your money. Same concept.
Foolish and dumb as Aaron might be, a W for Nick is a W for evil.
Every passing day I believe more that Nick is some Styxhexenhammer-tier Devil worshipper who wants to perform blood moon rituals to have their enemies killed. Even if Nick isn't literally doing that shit, his psyche is becoming one and the same as someone who does that shit. He has lost the love in his soul and subsists on hatred.