There's no such thing as "incompetence" in a team. If you have to trace to the root cause, the compromised email server isn't mine, or has anything to do with my development work. Does that mean some people are more competent than the other? Obviously not. We are on the same boat.

There're a lot of details that I'm not supposed to disclose at this moment. But simply, I gave up my sole ownership a long time ago, even before the Linode hack. The Intersango guys are fully aware of everything and they have inspected the code and server configurations for weeks before signing their agreement. They fixed some non-trivial security issues in the past few weeks as well.