If they're that big can you provision their "own" copy of your infrastructure or at least the database?
And then foist handling database changes off on them.
And then foist handling database changes off on them.
If they bite, wahooooo!
https://www.postgresql.org/docs/current/ddl-rowsecurity.html