How was the process done? How was your friend able to purchase $1 million worth of BTC without providing any KYC functions? Generally, exchanges have been very stringent with KYC requirements and personal records. From my experience alone, if a transaction involved high amounts of BTC, my exchange would most likely freeze my account to question the genuineness and veracity about the origin of my funds.
Though that may be the case, your friend indeed saved his fortune by converting them into BTCs. The difficult part is converting them back to cash in the exchange that he purchased them, unless he sells them via p2p transactions or via escrowing your funds.