Obviously. That doesn&#x27;t mean pinning is impossible or useless against other threats though, so I don&#x27;t think the argument makes sense in that general way. I bet there are tons of apps running&#x2F;with backends running on AWS that should have certificate pinning.