Until proven wrong, yes, I think they don't do that, there is no proof and it would be very silly to do that on EC2, Google Cloud or Azure.

Any hint that they could have been sneaking in confidential data of customers?