In terms of client/server and allowing and/or preventing access to fields, tables, stored procedures, etc stored with-in the database files that are located in the same directory structure on the same server drive:

1) How secure can it be configured verses additional time & money to switch to MS SQL?
2) What are the performance tuning tools available with VFP verses MS SQL?