Yes, it is built on top of S3/Glacier.

There is no "prevention". Using our experience from building longaccess.com, we have managed to aggregate and in some ways predict usage and minimise the retrieval/transfer costs (on average).