That is pretty much the case with any software that you don't build and host yourself. Is it possible that they are lying? Sure.