Yeah, SQL is definitely more secure, but I will have to disagree with you when you say Fox is vulnerable to corruption. At least it has not been my experience. Currently, I have 4 applications running on a busy LAN at a Naval Base with a over 100 users. Not once, in last 3 years have I experienced a file corruption.
This is something you'll have to decide for yourself. What one person values another may not. You can't make a commitment to a tool on someone else's advice. I suggest you do some testing with VB and VFP against a SQL Server database and see what feels right.
Yeah, its more planning, but in some ways I feel its easier, especially if you go the stored procedures route because you develop a more logical seperation between your tiers.