You left out one of the huge benefits of app engine. Google are responsible for keeping the stack secure. You deploy your code, and can trust that it's running on a secure kernel, web server, etc.