A web host provides the engine your site runs on and that better be a damn good engine.

I certainly agree with that. Not only good, but secure. As a WordPress host, security is one of our priorities and we have had PHP 7 in place on all of our servers (as well as PHP 5.6) for a long time.

Using insecure versions of software, whether back end or front end, is essentially just asking to be hacked. We of course find cases on a fairly regular basis of sites with insecure front end software being hacked, and cleaning them up is not always easy. :(

Security first means less headaches later. :)