Not true if you bring your own disk encryption keys. AWS also allows you to bring your own keys.