It does not matter what his players settings are. The server itself has to be sv_cheats 1 and he would need rcon to do so. It is possible he has an autoexec for a personal server that automatically does the sv_cheats 1. Personally I use sv_cheats 1 on my own to change gravity and friction.