I believe it doesn't matter for 95%+ of users. EC2 is used to run production services with sensitive data. Most Android/iOS testing is done with made up data,

I believe it doesn't matter for 95%+ of users. EC2 is used to run production services with sensitive data. Most Android/iOS testing is done with made up data, without privileged access to production. So even if it get compromised, it probably not much different from installing an app on jailbreaked device be end user.