Well let's assume that he f.ex. has friends in several countries to whose VPN servers he has a direct unimpeded access (by IP, not hostname).

Would a trusted VPN help? Or would hijacking the traffic at the point of departure (his phone / the air) still manage to corrupt the payloads?