The pandemic exposed small businesses’ vulnerabilities—and how to fix them