One of the most command ways a virtual machine is compromised is by brute-forcing a root SSH password. Do you suggest that every hosting company run non-stop d

One of the most command ways a virtual machine is compromised is by brute-forcing a root SSH password. Do you suggest that every hosting company run non-stop dictionary attacks against their clients? Or even nmapping open ports, non-stop, looking for backdoor services? 95% of the time virtual machines are running unmanaged, and the hosting company has no insight into what is running inside the machines, nor how up to date they are.