A hosting company telling you to switch hosts is not a neutral source. So, honestly: most people should not move. Site up, email working, someone answers the phone, fair bill? Stay. Switch when something is actually broken, not because an ad said so.
Migrations almost never fail for technical reasons. The copy is a solved problem. What breaks is the thing nobody wrote down: a cron job, a mail relay, an integration still pointed at the old server. The inventory is the real job.
The word "hacked" implies somebody chose you. Almost nobody gets chosen. A vulnerability gets published, bots scan the whole internet for the affected version, and your site answers. Not personal. Just a patch applied too late.
The best week in a datacenter is the one where nothing happened. The most important work is invisible by design. Nobody notices the drive replaced before it failed, or the patch applied before it was exploited.
A completed backup is not proof that you are protected. A completed restore is. Backup software is great at reporting it ran. It is much worse at telling you the file it made will actually come back.
Most business owners have no idea whether their host owns a single server. It matters for one reason: when something breaks, an owner can fix it. A reseller can only file a ticket and wait.
DNS is the only part of your infrastructure that gets worse while nobody touches it.
Everything else fails loudly. DNS just works, until a record somebody added in 2019 points at an address a different company now controls.
Read your own zone file twice a year.