I've got 14 CPU cores hashing away in their spare time...  Not going to cry over a lost $8.

But if the servers are actually rooted, how can we guarantee that the site is truly 'locked down'?  Depending on how much access they have, can't they just take it out of read-only mode and drain more accounts?