Imagine the other gaping security holes in this thing if storing all the data on a public s3 bucket flew under the radar until after release.