Re: so the moral of the story
Sounds a little paranoid to me.
You don't sound paranoid enough.
There are vindictive gits out there who would not shy from destroying your reputation by claiming you did something to the company's infrastructure after you left.
My rule of thumb is to make sure that all my accounts are removed/disabled the day I leave and that I have a copy of my entire mailbox, including the confirmation mail that my accounts have been disabled to prevent 'misunderstandings'.
Once had a company that, while returning their kit, tried to sneak a very expensive phone into the declaration that they wanted me to sign off on, which I had never received.