Yes — it’s called wiretapping. Whether you live in a one-party consent state or a two-party consent state doesn’t matter as he is recording the audio conversation of two persons without consent of either. They may argue there is an expectation of privacy in a car, but that doesn’t work when it’s not their car.