IANA has a history of hosting even more important services with third-parties [0] [1], so this doesn't seem too problematic to me.

[0]: https://root-servers.org/

[1]: https://datatracker.ietf.org/doc/html/rfc6305.html