Ideally hosting companies should act first by informing users about cross-site contamination risks, especially when multiple websites share the same hosting space.
Some companies will do exactly the opposite – they wait until contamination occurs, then they impose security services for a profit.
Moreover, clients will notice their accounts being suspended – this way a false sense of urgency is being induced.
