It took A2 Hosting and Squidix a little over 4 hours each to respond. first is A2 Hosting's response:
Hello,
Than you for contacting A2 Hosting. The cPanel Password is able to be displayed in the Customer Portal. This password can be changed, and the if it is changed by the customer, the password shown will no longer be correct, and the "quick access" from the customer portal will no longer function.
We do offer Two-Factor-Authentication for the Customer Portal.
If you are concerned about security, you are able to the two factor authentication, as well as change the password for the cPanel.
At this time, we do not have two factor authentication for our managed cPanel offerings, as this would cause us to not be able to manage the servers effectively, but for greater security, you could consider an unmanned hosting option.
--
Regards,
Jeff H.
A2 Hosting Support Guru
So, basically yes, it does not obfuscate the password (hide while typing) and there was no verification when changing a password. However, I have seen this before in other hosting client areas. Also, 4 hours is a long time to wait if your site is down but the ticket was "low" priority. I can't tell if it was set to a higher priority would they have answered faster or not.
Squidix's response:
Hello Stephen,
We don't touch base strongly about backups, however backups are maintained consistently, and you'll always have access to backups created.
Backups are performed once weekly, on-site and off-site.
There're no fees to restore backups, this is an essential service that we feel the industry is obligated to provide as part of hosting services.
Granted, we will always restore backups for our customers, we use discretion when multiple requests are made (e.g. let's say you request a backup restoration on a daily basis, this would be outside the scope of support and we would provide you the backups to restore on your end). We will however always restore backups upon request within reason.
--
Larry Wright
Squidix Management
There is no mention of how a client can make backups. However, their take on it is very reasonable. We would not need them to restore backups daily or hardly at all so it sounds good so far.