If someone DDOSes an open s3 bucket they’ll get a huge bill. If there is something in front of it, they might not.