But in such case, then the provider needs to send a report monthly or on request of the current status in term of updates, rootkit scans, performance, as well as csf reports. If not then is not trustworthy. Trust is earned by evidence/facts. If a provider is going to manage and wont give root...