How can shopify be hacked the checkout is on shopify server system you need to tell that it cannot be hacked.
You can tell your client this that shopify has it’s own cloud server it is not on your own server + the payment is safe and secured which is by so and so payment gateway and if the customer says it was hacked how the payment was processed ? it was through her card right ?