The risks of NIP04 are very known. The people that were fearmongering about NIP04 being the end of the world were the same that were getting paid to create a replacement which needed to be fancy and critical, to earn them a large grant. Unless your client has gone rogue, and there is a critical flaw in AES (both!), it is impossible to realistically break NIP04.