2. Good luck breaking out of your AWS instance into the hypervisor.
https://www.itnews.com.au/news/xen-patches-critical-guest-pr...
It doesn't take luck. Just skill, resources, and motivation. Like we already saw happen to the iOS "sandbox".