If I got run over tomorrow, how could they not be affected? Everything's backed up and source code is in Git etc. It's more all the processes (deployment etc) and all the credentials that come along with that. Obviously I can document the process, provide them with regular copies of the database backup and dumps of the source for each release, but what about all the other bits?
What are other small shops do in terms of business continuity for their clients? How do you manage it?
Discussing that fact with your clients would be to their benefit.
A lawyer may be able to hold credential information. Probably worth talking to yours.