ProbeLab studied the Monero network and found most public nodes run on one cloud provider, many acting like “spy” nodes. While Monero’s payments stay private, its network layer shows centralization and possible surveillance risks.
https://probelab.io/blog/peering-into-privacy-a-deep-dive-into-the-monero-network-topology/