Yes, this is how legal jurisdictions work. He can receive one request from someone in Mississippi, one from someone in California, and one from someone in the EU, and provide three completely different responses.
One of my clients willingly applies GDPR to everyone, regardless of jurisdiction. If you want your data, you can get it. If you want your stuff deleted, you can do so. I think this is the ethical approach.