Not a difficult task to not secure a cloud setup. And if it's publicly reachable, you will quickly find yourself involuntarily participating in an automated vulnerability scan.

Not really, it’s really amazing how fast things to go shit if you just stop patching or don’t follow best practices

Ah actually that's a typo. I meant to say "A few years.." implying around 2020-2021. Sorry about that.