I would call it laziness as it’s certainly possible to run a mail and Web service at a EU hoster or cloud. It‘s also sad and telling that they don‘t (care?) and even dishonest, as they don’t list the providers as subcontractors in their privacy statement.