The move to make all free instances unauthenticated (and effectively RCE-aaS) put a dent in that use.