s3 open bucket syndrome is basically cured at this point. (Aside from legacy buckets, which should all be exploited by now)

The "yes I really want to do this" confirmations you need to go through when opening up a bucket these days are about 4 deep...

Authn/z issues are real though, they'll never be fixed