My understanding is that he can make money out of the photos.
What he can't do is commission you to fly him for the purpose of taking photos.
It's a fine line, and it's obvious that a prosecution would be impossible (for a single random flight) unless somebody has a grudge against you and goes to the CAA with a witness statement claiming that a particular such and such was agreed before the flight, and then you admit it.