I will also make him aware of the need to verify addresses ALL OF THE TIME regardless of whether a cold wallet is being used or not.
I created a warning topic about this 6 years ago, and it's still relevant today:
How to lose your Bitcoins with CTRL-C CTRL-V.