How can a fixed price be safe for the client?
Because the price follows a paid scoping session that defines exactly what ships. Changes after that are scoped and priced separately rather than absorbed as hours, so the number you agreed is the number you pay.