I'm not usually one to theorize spying, but I'm gonna call it here: I'm betting that "remote administrative access" is found between the EC2 instance and the at-home box.

My first thought in seeing gsreenivas' discussion about the VPN/iptables/EC2 is that the physical box at home makes it feel more secure than an EC2 solution, but I'm not sure that is actually the case.