Here is the thing. What makes some other solution more immune to a system-wide crash than ec2? When that happens, what is the major difference between that solution and an ec2 based one? If you really want to play it safe and don't trust amazon, then what you want is a disaster recover site which is completely independent. However, wouldn't you also want the same for any isp/hosting solution?