My understanding is that they can "process" it outside, but the "Data Controller" should be a European legal entity. After all, they are not saying "we are moving everyone data to US", they say "we are moving UK customers to US". I don't doubt they can do it, but I'm not a UK customer, that's the point.