If you're a startup, it might be beneficial to study ISO27001 early on, so you avoid relying on things which are difficult under ISO27001.

Anyway, my point was that just relying on WorkOS won't help that much in answering the security questionaires.