I feel like another unstated risk here is that if someone can get his plate number through the DMV registration, they could buy tracking on it from one of the large ALPR firms and deduce his home location.