Does the SDK call out to some server running a node somewhere, or does it actually implement a client side IOTA node in JS?
What incentive do they have to expend resources to commit data to the ledger?
How can you trust that they have committed what you asked them to?