I have some very old Joomla sites on my hosting account and they keep getting hacked..
I suspect hostgator has got slack security and is blaming it on older CMS versions.
This is what they say:
"IMPORTANT: Failure to update these installations in a timely manner may result in suspension of the offending account until updates are applied."
Can they do that? Are they just making excuses because their servers and not secure?