This is only partly true.

The foundational services do not use cfn for the vast majority of their deployments.