As you are the webmaster, security falls on you. If you want to add this with what they offer, that's your choice but at the end of the day, it's up to you to secure your site.
And more no's. You could be offering a FTP service and by doing so opened your service to exploits. Since FTP is what it is, do we need to explain that the choices were not that good?
My web site hosting service is urging me to buy an optional security package, Site Lock, as protection against malware. Shouldn't the hosting service protect all the sites it hosts as part of the service?

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic