Obviously. But the cognitive mistake is the same. This is not me getting on my soapbox, it is a point of view held by psychologists, it's there in the literature.

Fine, I'll rephrase. If the hosting company took the simplest possible precautions, then this would not have happened. You can't trust people that don't work for you.