One should definitely not default into "we're secure because we use AWS". But let's be honest, how many servers in the basement feature video surveillance? How many destroy their hard disks securely?

An honest statement would be "we reduced our burden of security by building on top of AWS".