Wondering how they deal with abuse issues (or rather how AWS is OK with them doing this). Usually to get an EC2 account, you give out an email and a credit car

Wondering how they deal with abuse issues (or rather how AWS is OK with them doing this). Usually to get an EC2 account, you give out an email and a credit card and also do an SMS message confirmation. Any abuse issues will be tracked to you (unless you figure out how to get around source packet provenance). And you're either at fault or your VM was infiltrated and you have a venue to explain yourself. I realize that is not foolproof or anything but it is a higher bar than just needing an email confirmed and getting right down to it.