[Someone1234]

That's just referring to the VPS itself. If you keep reading the FAQ you'll see that there are ways to exceed that amount.

Plus there's nothing stopping someone breaking into your account and upgrading it in all kinds of evil ways (which has been a huge hassle with AWS tokens being stolen from e.g. Github).

[beachy]

Really? What are these evil ways?

[shawabawa3]

There were lots of stories of hackers spinning up the largest ec2 instances available to mine bitcoins on anyone's account they could get access to

[jajern]

Not OP, but I've heard of people getting hijacked and finding a bunch of VPSs spun up sending out spam and other malware related stuff. Maybe that's what they mean.