The threat is real, unfortunately. Your friend should look at switching him to a work visa, such as an O-1, which as an experienced engineer, the Ukrainian employee might qualify for.