Knowing what I know of Qubes, and reading that post - I think they mean lots of folks are using it for their workstations. Qubes doesn't really make sense on a server, which is how I'd normally read "infrastructure".
VPN providers are an annoyance for "collect it all" types. If they have the ingress servers' wireguard private keys, that annoyance goes away. Note that I use the term "annoyance", not "threat"... they sit in that gray zone where it's an irritant but not worth kidnapping people.