I am not sure I see the problem. There is a business with a reputation behind that service. There is a contract and it no different than a contract with another

I am not sure I see the problem. There is a business with a reputation behind that service. There is a contract and it no different than a contract with another provider like GitHub. Who are you to judge "real projects" BTW? It might not suit your security profile, but it might for other businesses that have different security concerns.