I don't live in a state with a law like California's so your "gotcha" isn't relevant.

Californians would have standing under the law but need expensive lawyers to litigate.

AWS has employed expensive lawyers to argue semantics; they host OS VMs and databases. This provides them legal cover for what AWS customers store.

Amazon the retailer stores customer data. A non-customer would have standing under California law to litigate removal of PII should they decide to hire lawyers.

Your reductionism is to law what a Linux beige box on a routable IP, no firewall, hosting a production health database with creds set to admin/pwd1234 is to software engineering.

Coincidentally 1234 happens to be the code to my luggage.