Creating a receiving address and exporting the private keys should be sufficient yes. I don't think It's possible to disconnect/remove a specific address though. If he don't have a PC, he could use Mycelium for android and buy a hardware wallet since the amount is big.