True, as long as it receives regular updates, and the hosting provider doesn't receive an NSL or equivalent, and you're not worth risking a 0day on.