I have used fantastico extensively with a couple of hosts now and have found it to be very useful.
All the scripts have messages saying that they are not supported by the hosts and I have respected that. I found it was very useful when I was trialling different CMS systems for my bblog site. It gave me lots of options until I finally settled on one I like.
I have also noticed that it tends to be about 6 months behind major releases, which seems prudent to ensure they are stable and secure. It seems to me that it is *less* of a security risk because it waits for security problems to be ironed out.
The logic of old software=security risk just doesn't follow. A version that's had more than a year in production wiht numerous patches and updates is *less* likely (in general, there are obvious exceptions) to have major security holes as they'll have been noticed and fixed, just look at phpbb's latest release - it's to fix security holes (in part).
In my experience most applications tend to get more secure with life (I work as a software tester) and less buggy as the bugs are identified and patched. Obviously there are almost no bug free, perfectly secure applicatiosn, but the general principle holds true. When a major release is made, with big updates to structure and functionality, a whole *new* set of bugs and security holes is generally introduced with them. So it seems safer to me to wait until the application has been in production some time before upgrading the scripts.
I upgraded as soon as Drupal 4.5 came out. And then had to upgrade to Drupal 4.5.1 to deal with security issues.
This is true. However for a newbie to do this it requires a very steep learning curve. I did several installs od drupal to learn how it worked and see how it looked when it was actually running before I finally started manually installing it.
Now, a year later I am confident enough to manually install most of these types of applications, but I'd still prefer Fantastico for it's ease of use and simplicity. Why spend three hours doing what you can do in three clicks?
Anyway. Obviously Total Choice Hosting isn't planning on using this useful piece of software, which is disappointing but that's life. I would encourage you (TCH) to survey users (both those who have used it and those that haven't) though to see what opinion is. I knopw such surveys don't make policy, but it would give you an idea if people wanted it or not.
Matt