Well that's certainly an interesting proposition that I hadn't considered. If they aren't running their own infrastructure, surely they must be using someone else's?

There has to be an actual node somewhere that the API connects to, right? Otherwise how could they receive or route payments?

I would be more than willing to award the bounty if it can be shown whose infrastructure they are using, if not their own.