(For example, you just know that some users would be willing to enter their IAM credentials when prompted at some point.)
There's also all the marketing data leakage, and access to the users to promote other companies' products, or maybe even get an affiliate/intermediate cut for AWS sales that were already AWS's leads to begin with.