I would not like that setup at all. They’re basically relying for security on hoping no one will want to hack their site as small potatoes.

I guess if she’s willing to listen and work with you on it I’d give it a try. But otherwise it depends on how much you want to do neurofeedback.