They don't know what security means I didn't even want to give one star on Support and Reliability, but it's required. but my real score is negative 100 points.
funny tip: if you type "refund" in the chat, it leads you to q&a page repeatedly, even you paraphrase. but once you type "renew" or "purchase new service", assign the human assistant to you right away.
I gave up my server to my ex and I told Hostmontser to delete my credit card info, but they still charged $422 me a year later. and no refund was accepted. I know giving up the server to other people is not safe, but I explained the situation and told them to delete all my info, but still kept my card info and let him use. this is definitely against the privacy policy. They kept saying "We emailed the notification to the primary email" but the primary email and the server is not mine anymore, and how could I know that?
also they allow you to change the primary e-mail of not even your server. I didn't even contact to my ex, but once I talked to ownership@hostmonster.com with my ID copy, they set my email to the ex's server. I also told them that security-wise this is questionable and it's not comfortable to take over someone's server, but they ignored my concern and kept telling me, "to get refund, you need to change the primary email." (Although even after I changed following their rule, they still refused to return my money. such an unnecessary and uncomfortable step for nothing) anyway, according to my case, I don't think they know what the security means.
also their mail server sucks. constantly having problem to sending and receiving. they give you the temporary solution like setting the security lower or MX or SPF, and almost once a month having the same problem, but all they did is giving you the same solution over and over, and no further action was made. Yes, service sucks.
If you still want to get the server from them, all I can say is just good luck.