Strange security implications he opens himself up to.

He offers an VPN Service / more or less without the proper knowledge.

I think he could be sued for distributing child porn and other things VPN companies take a lot of ressources to make sure they are protected by that stuff.