But, why doesn't this guy have a work laptop?
I have a work laptop my company provided. My wife has a work laptop her company provided. Everyone in both of our companies have work laptops provided by the employer.
Plus there are policies in place with this. We have agreements that all work is done on the work laptop and nothing personal. We signed saying we agreed. When we leave they take the laptop, in its entirety. It is also encrypted and automatically backed up. They also know if we have plugged in ANY external device like a flash drive and or external HD.
So not buying a work dedicated laptop for this guy, I think will cost you now that you care about what he might do with it.