I (want to) imagine that the million dollars seized will be given back to the people who lost them, but has the German government said something about the destination of the funds? It doesn't seem easy to track the money back to their rightful owners, although I don't think Germany will create any strategic reserve of Bitcoin anytime soon either, so what's next?
The Bybit hack is famous and the German government does know about it. With this hack, the victim is Bybit and Safe multisig wallet, and if there are receivers of those seized coins as victims, it will not be any user on Bybit exchange.
Remaining part of story is how German government will use seized coins but Bybit exchange will have good advantage if they are considered as a legit company in legal terms in Germany. I am not sure about it but gooling shows me that German people can use Bybit and I see good chance for Bybit exchange to claim those coins from German government.
I don't know how it could impact Bybit not getting that money back, but I hope you're right and it eventually goes to it's legit owners, whoever they are, and I explain: As hd49728 said, it's not good advice to store your assets on any CEX, and I won't be sorry for Bybit either if they don't get the money back, just like NotATether, but I wouldn't like to find out that users, despite their recklessness, are affected by the incident.
Most of us have trusted one CEX or another when we started and some of us have suffered the consequences of their poor management too, but in some cases, which are the ones that worry me, it can be a lesson too expensive to learn. This doesn't seem to be the case, but credibility is a valuable asset that gets damaged little by little, if it is not taken good care of it.