> The assumption here is that Amazon also have paranoid level security and their employees are 100% honest..

Add 100% competent to that too. I expect a bug is much more likely that a dishonest sysadmin or dev.