you are right he could just remove the policy, but then his parents would know he removed it and could then punish him. with no policy they are unable to verify if he has been using it or what he has been doing.
my advice was to take the phone away as well, but i guess he needs it (or so they say).