Will cost a lot to keep up the level of security we will need right now because it appears that the site has become quite a target.
It has been suggested that the name has high value search words.
None of the content is of a controversial nature and the site generally has little traffic and few updates.
Just a thought but, given these three facts, would your cousin not be better off simply to take his content and set up a new site with a different name?