That's a good point. When I use them I assume they're making API calls to a central server to validate (or something) them.
Making API calls to a server to do button debouncing does sound like something so stupid a tech company would do it
Making API calls to a server to do button debouncing does sound like something so stupid a tech company would do it