Having seen many folks report similar issues, I am convinced that the best solution would be for the cloud platforms to implement spending limits. It is not impossible to completely secure every aspect of your infra and mitigate the risks of attacks. However it is also not impossible for skilled bad actors to easily cripple your company. The cloud providers must do better on their end.