I’m very confused by this blog post. The risk of exploding costs he’s talking about comes from an attack, right?

So he doesn’t have the risk appetite for a DDOS attack nor the desire to figure out how to properly mitigate one. And this is AWS’s fault?