How much real engineering are these providers doing? How well do they understand their stack? If they're all running the same underlying software, it suggests that setting up such an operation doesn't require much skill and it's heading to "script kiddy" territory. Sketchy? Certainly suspect and needing a lot of due diligence which my gut tells me that (a) they won't fare so well; and (b) they are so low-margin that they would be unwilling to participate.

If Apple got hacked because their dev center was powered by a $10 control panel script then yeah... they'd be extremely sketchy too.