I am NOT well versed (so standard disclaimers apply :) but

https://latacora.micro.blog/2020/03/12/the-soc-starting.html

says that SOC2 is (mostly) about sales and little about validating security practices, only that you have them. I find it telling that SOC2 audits are performed by accountants.