Even if your friend uses a $1000 offline wallet, it won't protect him at all if he gives away his private key while chatting. Though I doubt he's that stupid.
This is probably about misinterpreting what an online wallet is and what is an offline wallet. OP is very likely thinking of desktop, mobile or hardware wallet which in this case can be very easy
hacked by asking the victim to send his/her private key/seed for some reason or to download a fake wallet.
The story can go something like this :
- Hacker: I found some vulnerability in Electrum, you may lose your coins if you do not update to a new version.
- Victim: What should I do now?
- Hacker: You need to download a new wallet from this link: electrum.xxx or send me your seed to check it.
Depending on how naive one is, in some cases, a hacker will manage to trick a few people with this story. Not so long time ago someone is posting some seed checker tool for Ledger HW on Reddit, and some users lost their coins by typing their seeds in that tool, how stupid that can be...