Most businesses cobble together hosting from one company, maintenance from another, security from a plugin, and hope it all works.
When something breaks, everyone points fingers. The host blames the plugin. The plugin developer blames the theme. The maintenance company says it’s a hosting issue.
You’re stuck in the middle, trying to coordinate vendors who don’t talk to each other.