An EBS is optional, it entirely depends on what you want your extension to do to determine if you need one or not.
If you do need an EBS, it’s on you to make/host it. You can use whatever software or infrastructure you like, it just has to be able to communicate with your extensions frontend securely, and properly verify messages being sent.