Oh right, I overlooked the obvious. Like a lot of people unfortunately, he probably copied the clearnet link to a regular browser.