The fact that DigitalOcean have no idea how to secure customer block devices makes me wonder what other security issues they are unaware of.