[Elrac]

I'm a (happy) Hetzner customer. A few years ago I ran some services with easily guessable/forceable passwords and my host turned into a node of a cracking botnet for a day or two.

Hetzner got nasty mails from a couple of "victim" sites, forwarded them to me, helped me clean house and everything was fixed and airtight within hours.

I think it's to be expected that a few self-managed root hosts will be poorly managed (like mine was) or abused. But as far as I can tell, Hetzner does a credible job of taking care of problems.