Hi, I'll get right into it. I typically make static and simple wordpress websites (between £400 and 800 ish). I've been doing this for a while now, and am very happy with it, but I recently closed a really promising deal. It's a 3k multivendor site. I'll be building it with dokan + elementor pro

I need help communicating the limitation of liability. I'll explain that I am building a wordpress website, following all the best security practices (wordfence premium, reputable host, regular backups, 2fa for admin, regular updates and testing, reputable plugins only, etc), but that ultimately there are still things out of my control. A million things could go wrong and they could end up costing money, but I can't help if an unexpected plugin break causes the website to go down or causes a hacker to intercept payment details, etc etc etc. Should I recommend them to get some kind of insurance to cover this? How exactly is this handled in formal contracts?

For example I could very well see that someone could somehow hack into somebody account who has a large sum sitting in their wallet, they could then issue a payout to different bank details and steal some money, or a million other ways this could go wrong. Am I overthinking this, or is it a genuine thing I need to bear in mind and protect myself from

Would really apprciate some advice as I've never done a project of this scale, or with the potential to go as wrong, as this one could. What if