It's assuming that they're all infected by some malware. Of course not all of them are, but realistically there are also thousands of providers, not 20.