Maybe I'm imagining it, but I seem to recall that it used to he possible to host Wordpress or Drupal without getting hacked within the first fee months because you missed a point release upgrade.