cloud providers design for software failures and network partitions. they do not design for drone strikes. the redundancy model assumes your availability zones won't get hit by the same military operation.

Thats what regions are for... AZ downtime is one thing, if you loose the region, you should be able to bring up your services in another region.