If they actually had to pay those costs, I promise you they wouldn't be letting their customers run up a bill without a credit check. There's also the question

If they actually had to pay those costs, I promise you they wouldn't be letting their customers run up a bill without a credit check. There's also the question of whether Netlify is even accurately tracking this bandwidth...