Camelot has had some real problems with hackers which I think are finally fixed
I can't say for certain, because I haven't been in touch with Tony at Camelot in a while, but there is a world of difference between the servers of a hosting company being open to attack and websites on those servers being open to attack (usually because the owner hasn't updated them).
The Blue Host sales team told me there was no special configuration for servers supporting Zen Cart.
Partly true, partly untrue. No one would recommend Windows servers or non-Apache servers for hosting Zen Cart. Similarly you wouldn't want to host with a company that ran PHP as an Apache module and not as a CGI (because of the lack of security of the former and the enhanced security of the latter).
was told that the Zen Cart folks installed the software on their machines and it worked fine
Partly true, partly untrue again. You do have to have a track record of installing Zen Cart on your servers, for those installs to work correctly and provide suitable hosting support for Zen Cart. You also have to provide "free installs" of Zen Cart - but this can mean manual installs or auto-installs. The bucket hosts like Blue Host/Host Monster just provide auto-installs (which almost anyone can do) but most of the others provide manual installs and often with additional add-ons pre-configured.
All Zen Cart Certified Hosts, with the exception of Blue Host/Host Monster also offer free transfers in place of a free install. But "free transfers" mean doing actual real work, and so bucket hosting companies aren't interested in providing that level of service.
I don't think you can believe everything you hear
I heartily agree with that - especially when what you hear comes from bucket hosting companies.
Speaking personally - we had to make a decision many years ago - whether to rack up a lot of cheap servers, massively oversell disk space and bandwidth, employ additional hosting support or rent in white-labelled hosting support from one of the specialist companies, or grow more slowly and retain the personal service.
We weren't interested in becoming a bucket host, becoming 'BIG' and then selling out to another larger company for millions as our "exit strategy". We actually enjoy the work we do and we'd have lost that enjoyment if we went down that route. All that we ask is that we make a decent living from our business.
As a result of that we've never had to take on any debt to finance expansion and have brought new servers online as and when we need them. We don't oversell bandwidth and web space and we close servers to new sites well before they get to be crowded. None of our servers use anything near the amount of space available on the hard drives, and none of them use anything near the amount of bandwidth we get allocated from the Data Centre for each server (despite increasing the amount of web space and bandwidth we offer to customers year-on-year).
I don't think I'm letting out any state secrets when I say that the Certified Hosts who operate along similar lines to ourselves are less than happy at allowing bucket hosts to become Certified Hosts.
Vger