AWS is a huge suite of products and services, and there’s a lot of old legacy shit running on it.

Yup, AWS is legacy cloud. It was only recently that they set encryption by default on S3 buckets, before that they were just in the clear by default.

Cybersecurity and disaster recovery are not directly profitable, so they are almost always neglected in your average shop.

It’s never important until suddenly it’s the most important thing in the world.