Security is security, how you get there is entirely up to your organization. Also I'm not sure how having code access to their site proves that it isn't some rich person's tax avoidance scheme. In a way, all charities allow rich people to avoid paying taxes to some degree.