It is very difficult to recover hacked wallet address, Your friend should immediately change the hacked address and stop using it. And there is no harm in using an application wallet provided by the developer, to be safer.