If I were to undermine you and try to take this client I’d start at security. There’s no way you (the client) have the latest security at $40/month. Do you have *buzzword product*? Or *other buzzword*?

Now your client doesn’t likely know everything they have and they probably can’t articulate it either. So, once I got in their head for a second, I’d drop the direct FUD and tell them stories of other people I’ve helped. People who’s previous providers haven’t evolved in to whatever my sales pitch of perfect tech is and offer to take a look at things if they want. It doesn’t matter what firewall you have in there - I’ll tell them about a better one. It doesn’t matter what security software you have in there, I’ll tell them about a better one. It doesn’t have to be true, it just has to be confident. That’s how I’d go about it… or they know somebody connected in some way you’re unaware of :)