Wayne, if you have a scope document on what your client needs how about sending it over. While anybody can hack into Moodle because it's open source, you might consider advising your client that Moodle is a fairly sophisticated web application and they should at least consider working with a Moodle Partner company. MP's work with Moodle every day and some are part of the core development team. This can provide the assurance of due-diligence as they stand behind the work with a higher level of expertise. The next best reason is the one Don pointed out; that is, by using a Moodle partner company clients are directly supporting the future of Moodle through a contribution.