No PoS, no problem I can see.

Also many nodes might simply be private, no you can't see them here.

If there is an attack vector on cloud-based ones, more private nodes will come public is my guess.