If his phone is under surveillance will be hard to go unnoticed.
First... are you sure that
there where you chat with him is safe ?
But before installing something he has to get rid of identifiers...
IMSI - identifier is on the sim card. ISP related, as long as he use a sim, the ISP can track you.
IMEI - attached to hardware.
Some governments use/can use radio interception.
MAC - Bluetooth and Wi-Fi, nearby listening devices will know where that mac is connected
In vain we talk about that app or that, if he lives in a surveillance state...
If the danger is to "get arrested" the only option to chat
is from another phone(no connection to his identity) via another network, let's say..."a trusted one".
Signal is secure but is not possible without a sim card...thus IMSI will be active.
Matrix yes. Chose a client which supports both platforms.
Something like matrix "or better" is
Braxme, take a look, on the page is also an apk file available to download.
uses stock apps or fdroid
Via f-droid he can install Aurora Store. Log anonymous into then search for Orbot
You have remember that.. even with
all security measures in place, internet traffic will still be visible.