I'm skeptical of the number that Rettig quotes. I'd like to know where he got those numbers. Also, the code that runs Login.gov is (mostly) in the public domain: https://github.com/18F/identity-idp – anybody with a $2/mo VPS could run the code and do their own load testing.