It's not the track record that is important. It's the fact that after their first major hacking attack they learnt absolutely nothing. Still hiding the truth from the customer. Still failing to do security audits. Still sticking with their ColdFusion front end.
Also their support is only good for minor incidents. When you have a data centre go down their support evaporates and you will be left with a multi-hour outage with no clue what is happening.