I admit this has been nagging me for a while (especially as it is with some regularity they find hosts whose sites have been widely hacked); I keep meaning to do some digging and find out one way or the other but never had the time.