He might have misestimated the project scope, so there is still that risk (and perhaps that pads the number?).
It's not clear to me what he'd do if it took longer than he thought (return money, finish on his own time, go back to the well for more support)?