What you say here is correct. I learned a more generalized version of this with the first business I ever started:

if you are entirely dependent on a single supplier or a single customer, your business is very much at risk.