I'm happy with "established VPS provider", and "a track-record of excellent security practices".

After posting, I realized 1 and 3 are a bit redundant. You have to be established to have a track-record, of course.

Weeeellllll, maybe they established a track record of excellent security practice in a related field and are just getting into providing VPSs?

But yes, really, somewhat redundant...