Speaking as someone who doesn’t consider himself a hardcore geek but no whens someone is not, it’s entirely possible to insert something. Improbably yes, but possible. If you were upstream you could just edit his packets, packet spoof, dns redirecting.