Anecdote about why it's good to upgrade & keep your site secure

My domain host charges for e-commerce and because my business is small I chose to go Zen and save the nominal but to my business significant cost. I happened to see something in the forum about using Zen Cart certified hosts and thought my host might want to look into becoming certified; the owner is very quick to respond to help requests, the servers are always up, etc.

The owner told me he had decided to go with the paid carts instead of the free ones because he'd found that the free ones aren't always kept as secure as they should be. He said he'd just been working on tracking down the source of some spam, and it turned out to be a Zen Cart site that hadn't been upgraded or secured well. Some hacker had gotten into the older site and was using it to send spam.

The owner sent me a link to 'Important Site Security Recommendations' but I'd already gone through both that and the document on recovering from a hack, so I figure I'm in reasonably good shape security-wise, but it was a cautionary tale of what can happen if you don't stay on top of version and security issues.

Let's put us on the HostMaster view, he/she can sell and add software and get more €€€ instead of just the monthly fee for the hosting service or VPS. It's matter of how much is on her/his bank account after all ;)
What he/she don't know is, Commercial Apps are more vulnerable to stay out-dated in security concerns because they don't have any community at their backs, looking for making apps day-by-day better. Ah! without forgetting about the closed-source code that no one can look at. Money can make people sometimes blind.