He said he is a citizen and not an operator.

If he was planning on buying subscriptions for Russians then some operators will hand out his details if something illegal was detected.

If he was planning on setting up a VPN of his own on his own connection... then he's in trouble.

Imagine child porn and how hard that would be to fight.