When I worked for a company that did critical infrastructure for various parties in the digital identity and authentication space, we made a clear decision to put our designs and code in escrow with an external party.
In case something ever happened to the company, there was at least a way to ensure dependent parties could at some point continue. There were many things that could have been done better here, but it was something.
I am saddened not more companies are doing this.