Tell him to use Tor / Orbot, with a Snowflake proxy. Set his wallet to only connect via Tor.

Overkill, perhaps, but he's in Nicaragua and its money...