Holding any crypto asset or sensitive information in rooted device is really bad, he need to use another phone.