A web host supposedly provides the servers digital and physical security. However, you are accountable for any problems due to your website's shortcomings. To say it in simpler terms, your website host is responsible for the server's security, not your website security in particular.