[joecode]

Certainly agree. Perhaps it would be better to suggest moving to dedicated servers, depending how security-paranoid you are, anyhow.

[qq66]

Dedicated servers only give you the illusion of higher security.

[chopsueyar]

Please explain.

[lusis]

You have the same obligation with an EC2 AMI that you have with a physical server.

Using a cloud/vps/whatever provider does not obviate the need to secure the base OS.

[cperciva]

Using virtualized hardware does expose you to vulnerabilities in the virtualization layer, though...

[nphase]

Those get "0wned" on a regular basis too.