It's not easy running a website

I think I have this right: There are currently two large-scale ways in which you can have lost control of your website.

• If your site admin was compromised, there's an Apache "rootkit" (not actually rooting the host, but invisible to the admin) that serves a stealthy javascript downloader to all your visitors. As the site admin, you don't see this in the site content.
• If you deliver content from an ad network, you may end up serving malware.

Either way, you won't know about it until the customers are complaining.