DoD Estimates and CMMC Level
The DoD estimates that only 85% of the defense industrial base needs to be certified to CMMC Level 1 because they only process or create FCI. Do you think all companies should try to achieve Level 3 even if contracts don't call for it? Seems like Level 3 is beyond basic cybersecurity hygiene?
A question to ask is: is your equipment comparable to a home user? This would not pass any spell test.
Simply put, the answer is no. 85% is Level 1, but when you take in to account all of the contracts, insurance contracts, and anything you are required to do as a company you go way below level 1.
Good hygiene in general is level 3!