I guess. It's set for 4 hours, so I very rarely have to use it.
Right. That's as close as he can get to what he wants to do. Disable TouchID for unlocking, add a passcode, but set the "Require passcode to unlock" timeout as high as it will go.
He'd likely have to unlock it in the morning, and maybe once throughout the day if he uses his phone like I do.