It is not about controlling your private keys, it's about getting the hard forked coins after all. While in GDAX, he does not own the actual bitcoin, but Coinbase does. When he moves BTC out of GDAX (Coinbase), he is in control of his bitcoins and he would own the same amount of the forked coins in the case of hard fork.