GoDaddy is a poor choice but that’s your friend’s choice.
For SSL, could you check if GoDaddy allows ZeroSSL?