They do this. There's a fine place between balancing the overhead (contacting customers, monitoring) and false positives.

But if weird stuff happens, AWS will take action. I'm sure part of it is because they care, but another is because they don't want to get stuck holding the buck.