I have encountered this sort of thing before. Moodle mobile web services are essentially a broad range of services that are required to get the mobile app working - it's a time saving feature so you don't have to enable loads of services.
My view is that you enable only the functions that are required for a particular requirement. Then you add a user that it only given rights to the required parts of your Moodle site (not always system). This sounds like your vendor is just being lazy. Without further explanation, that would be a bit of a "red flag" for me. This is with the caveat that I have never heard of CampusM.
My view is that you enable only the functions that are required for a particular requirement. Then you add a user that it only given rights to the required parts of your Moodle site (not always system). This sounds like your vendor is just being lazy. Without further explanation, that would be a bit of a "red flag" for me. This is with the caveat that I have never heard of CampusM.