Depends on the attack, really. Some realistic threats: - The hosting service doesn't wipe physical disks they discard. - The hosting service doesn't wipe virt

Depends on the attack, really. Some realistic threats: - The hosting service doesn't wipe physical disks they discard. - The hosting service doesn't wipe virtual disks between customers. - Your offsite backup provider gets compromised. - Someone conducts a non- targeted attack, dumps whatever SQL database they see, and leaves before they get noticed. - Someone conducts a targeted attack but gets noticed before they can develop a working patch to compromise the service. - Someone (e.g., a government) pressures your hosting provider for data but doesn't want you to know. Modifying your JS files would risk being noticed.