They don't have to DDG runs on AWS. In theory, court orders could grant access to the underlying VMs via Amazon without DDG even being notified.