Amazing how blacklight gives it a perfect score when, in reality, IP addresses, domains, SSL certificates and other traffic metadata are clearly visible to AWS.

Not only the data can be subpoenaed, but it's also being intercepted by the usual 3-letter agencies.

If you care about user privacy find a smaller hosting in a country with good data protection.

Even better, host the site in somebody's home in that country.

And keep in mind that this is still not enough.