The problem is really that sharing securely is way too complicated. So inexperienced or lazy people give up and make the bucket public so they can get on with whatever it was they were trying to accomplish.
Alternatively, the admins should set up of a simple CloudTrail rule to alert them.
Being “in the cloud” doesn’t abrogate your responsible for security governance and monitoring.