He is not being recruited as a soldier, but as a civilian. This works by drip feed. To simplify, let's assume the agents are actually from the AIVD (versus a foreign government or criminal syndicate) and that the account is 100% true.

First, he might be asked to recruit. A few months in, he may be asked to "to "crash a system in a public place". Then he will be told to dragnet his Tor exit nodes. If he says no the agents may be unable to continue protecting him from prosecution for crashing that system earlier. He did it as a civilian, after all.

These are people used to total impunity from our rules of law. They will be self-serving and deceptive. You make your own bed by heeding the sirens' calls.