If you put the whole read-only auth system on a single machine, yes, but there's no reason you couldn't have an arbitrary number of these boxes. You'd presumably put a few in each cluster of frontends at scale, not one per frontend.