If you don't believe AWS's attestations about their security encryption and customer isolation and the associated certifications, then agreed, you shouldn't be sharing your data.

That restricts you to your own infrastructure then. There are tradeoffs in both directions.