It could be a good move, Assuming he has a safe addy to send the orders to and does everything he can to keep his real address secret. Like get a friend that doesnt grow to recieve all of the mail than deliver it to him.

As long as he doesnt sell dried, processed, or any other part of the plant and does strictly online orders he should be ok.