If it's a large company, they might simply have a legal department that has found a justification that they think will stand up to scrutiny. As a small indie project, I can't afford taking the risk, simple as that.
It is one reason I don't host ANYTHING on EU servers
