I believe they've stated in multiple places that they have budgeted for running the auth and entitlement systems. They set aside money in escrow to do that. Those systems are cheap compared to the CDN (which is also getting much cheaper). A small team could have a multi-year runway for running auth and entitlement.