Not an option. Client is non-technical, a one person company
Managed on-prem perhaps? Setup a server at their office.
this is a remote company, and the person operates from their apartment, so that's not an option!
... in the UAE, so only less risky if your office is remote enough it doesn't also make a nice target (like, say, located within/near Dubai's Internet City).
They're not firing nukes yet. Missiles don't blow up a whole building, let alone a city.
and you don't upset whichever prince decides to compete