This is what I was thinking, surely privacy becomes an issue if all of your data is going through what is essentially a 3rd party. Maybe secure connections bypass EC2?