Managed? Yes I manage it. Is that what you mean?
In fact, "Managed" means that the host is managing it for you (or a third party company). When you manage it "yourself", we referit as "unmanaged". It's the offer which is "unmanaged".
FTP
You might want to consider SFTP , ("secured") so the data you are transmitting between your local machine and your server are encrypted.
Are you using a CMS? Or your own CMS? My own
This is good to run your own CMS, because you are not exposed to "known" vulnerabilities of existing CMS, but it doesn't meant that your own code is bulletproof , just hackers might not bother seeking for exploits for "one" guy, whereas they can exploit vulnerabilities of millions of sites using the same CMS.
So, be sure to test / sanitize all data which are posted at your site (if you are forms, or things like that), to avoid sql or other kind of malicious code injection, also be care of XSS : [
en.wikipedia.org...]
That being said, it's hard to tell how your site was hacked. Was your home page replaced? or it is redirecting to somewhere else? In your FTP folder , is there files which are not yours? Do you have logs of FTP accesses?