Yep- just because you're small, doesn't mean you can't do damage. Look at any of the script-kiddies out there that deface the various sites such as phpbb, shopping carts and CMS sites. Depending on the nature of the attack, they can take down a site for minutes or hours, or even manipulate files to destroy the server and all customer content. Lest we not forget the issues on cPanel 10.x in the past