Absolutely - not sure why all these mini-emperors-of-Rome insist on downvoting a legitimate compliment, but to have a piece of security writing that

1) reveals a significant security issue

2) ...without the usual overblown signals to the effect of how important it is (it usually isn't) and "hey, pay attention to me"

...is refreshing, no other word for it. And if it were done more often that way in the mainstream, there would be no need for a clickbait headline arms race.

I think you should have a discussion section where you talk about potential implications (possible password leaks via S3).

I love this kind of analysis, even considered doing some myself, do you just pick apps at random to do this with?