How about Google Video: https://upload.video.google.com/

He can just upload the MPEG2 there, and they will transcode it into a flash movie that he can then just e-mail them the link to. Google allows videos to be set private, so it won't come up in a random search.

Easy for him (click browse, click upload) and easy for them (click link in e-mail).