I understand buying the service from a reliable vendor, but if you're a gigantic organisation it seems insane to have it running on the same infrastructure as all their other clients.

Why set it up so if you break something you break the whole world?