I am working on a typo3 installation right now and also know someone that would probably be interested in your service.
great, would love to get some referrals.
Both websites don't have any sort of user login or important user data.
depends on a lot of things, most of the time to an ill-intent hacker your server resources are more valuable than user data.
Would you even recommend your service if there is no monetary loss except some downtime if the website gets hacked ?
monetary loss is an option which doesn't apply to all site owners, for example: lets say I have a decent web traffic blog about cooking or anything which gets around 500-1k unique visitors on a daily basis.
even though I am not selling or storing any of my visitors data, its still a viable option for a hacker to do things like:
~ host phishing pages in your domain.
~ run custom js to display advertisements or worst redirect users somewhere else.
~ run email blasters or crypto miners on your vps/server.
the site owner might not even notice the things but there are a lot of things to worry then just downtime.