They should contact us - Nextcloud GmbH. A contract with us contains all indemnification they could ever want, so it should not be an issue at all. (A)GPL is used in a countless business environments, they're tried-and-true licenses that have been proven to be pro-customer. Especially if you have a proper vendor contract it's actually a huge advantage over the various vendor licenses and their often heavy-handed anti-user clauses.