Since you know a lot about SOC: is SOC2 Type I (point in time) enough to close enterprise sales? Is it worth getting for a new startup (seems super simple)?

Yes, it is, and no, you should not get it, not until you know you need it. If you have to ask, defer.