On CritiCall Ops hosting we manage the server OS, web stack, firewalling, SSL issuance and platform monitoring. You manage your website content, CMS updates and application security.
You do not receive unrestricted root access on shared hosting. That keeps the platform stable for every customer.