"Their security seems fairly top-notch"
That sounds optimistic: a mass-leak would be a major company issue touching its credibility, with a possible black-out if the hackers do not make it public. Think of Yahoo: how many years to admit a massive leak?
In addition, who can be sure there are no DBA leaving with data on USB keys?