Anyone providing professional services should have liability insurance.

Furthermore, unless a service provider has been acting negligently or has given some sort of guarantee like "With my services, your WordPress instance won't be hacked.", they usually can't be held responsible for actions and outcomes that are out of their control.