People with side projects, how are you managing liability? Browsing the projects on indiehacker, most of them are off-to-the-side (they consume data and work w

People with side projects, how are you managing liability? Browsing the projects on indiehacker, most of them are off-to-the-side (they consume data and work with it and mostly that data is low valye) or development related (things that are embedded or make pages but don't run in production). But a handful of them actually must have credentials for other service to work or run in a trusted contest - in other words, they are used in ways that expose the customer to security issues on the part of the operator of the side project. What happens if you get pwned and cost your much larger customers serious money?