As discussed many times before, it's not a magical piece of paper. You can have many such papers, which then will not be so magical anymore.
Gibralter could simply declare the company tax resident as well.
Then if there is a treaty between︀ Gibraltar and Malta, they will have to figure out who wins. If there is none,︁ then the company may end up being double taxed and you can only reclaim tax︂ paid twice as foreign tax credits under domestic law (if such a law exists).
But I don't know how aggressive the tax authority in Gibraltar is.
ATAD 2 contains rules︅ against hybrid mismatches:
https://taxsummaries.pwc.com/gibraltar/corporate/group-taxation
I would also guess that they can thwart any ideas people︆ have about receiving "dividends" from a US LLC tax free under NHR in Portugal.
I don't︇ see such a limit in Gibraltar.
CFC rules are about where the owner is located,︈ which would be Gibraltar in your example.
I would love to be a fly on the wall when︌ you tell the Hacienda what they can and can't do.
Of course they can claim︍ that, then it will be up to him to prove otherwise.
If they️ really investigate him, they can even access records from phone towers.
But they won't even have to, they will just claim something and then he can try to fight it in court.
But Malta is a Schengen country - he could do what you are suggesting even living in Malta. Claim to be living in Malta, but just travel to Spain without flying and stay there.
The Pwc website says 12.5%, but even if it's 15%, he said he would be fine paying that if he could live in Marbella.
Sure, but unless you go back to sleep︀ in Gibraltar every day... probably not legally.