I hear one of the biggest reasons stated for using a VPS as opposed to shared hosting is the added security. But I have also heard of servers being brought down because a site that was hosted on VPS was hacked, and through it the whole server was taken down. Everything back till the most recent back up was lost.

So was this server badly set up? Is the additional security really sufficiently good to merit the extra cost?