SO an update, I connected a 10Mohm Resistor and my current draw is only 3.1-3.2uA when the switch is engaged and 2.7-2.8uA when the switch is removed. I think that is really livable numbers. So far not getting any false positives which is great. :)
You don't need a controller. But it will be hard to squeeze in much more into the gateway (running on an ATMega328) and it won't be able to do any SSL encryption (which I imagine most people would want).
So one of the best options is to run a light "controller" (on something that has a lilttle bit more horse power) which just forwards your sensor network data to the web service of preference. I imagine you would need to do some kind of re-mapping before posting the data as well.