pull down to refresh

Yes, people often choose convenience over hard learning. Privacy is a big rabbit hole in itself.
Id say just start with 1 thing, & just keep mentioning it. Get him to enable the kill switch on his VPN. Then move onto another etc
In the end its up to him, there's only so much you can do.