[threeseed]

   Do they think their customers are stupid and will forget the incident?

Yes. They have done it before and people on here still recommend them with a straight face. It honestly confuses me that people care so little about security.

[hkmurakami]

I'm one of those people who have a slight interest in the security but don't know enough about it to be properly informed about my own decisions.

For people like me who basically can't make my own decisions properly, where should I switch to? Is DigitalOcean better in this regard?

[Kudos]

Digital Ocean is largely untested in this regard.

[raverbashing]

And that's the real issue

Two factor auth addresses the user password as being a weak link, and this is a nice step

Oh and btw, yes, the private keys were on the server, with a passphrase