What is even potentially more nefarious on this is with the US Government, for example, they don't even house their own servers anymore. Most data is stored with third-party vendors that have FedRAMP certification.