I used to agree with you, back when S3 defaulted to public or at the very least made public a very easy checkbox. These days it defaults to private and you hav

I used to agree with you, back when S3 defaulted to public or at the very least made public a very easy checkbox. These days it defaults to private and you have to click many warnings and unhide options to even expose the public options. That said, I don't know that many organizations practice good hygiene about which buckets they use. Like they might just use 'the one bucket that we have as a company' rather than separating their uses into many smaller buckets that are appropriately access controlled.