Maybe they mix it: serving fonts/pictures/etc over scalable cloud providers and hosting confidential data themself.