Without wanting to defend Craptsy, it doesn't mean much that the front end is on AWS. It's definitely not beyond common sense that they have a separate non-cloud server that runs the hot wallets. The site being on AWS really doesn't mean much in this case.