There is nothing called unlimited in this business machan.
Choose a shared if you don't want to use ffmpeg, Amadeus engines, geoIP PECL libraries, APC, Memcache, etc. A pretty basic site would run smoothly on a shared host.
Go for a VPS with 512MB (nginx + mysql. php-fpm with APC and memcache 4 instances). This can perfectly handle million hits a month.
1GB at least if you want cPanel.
Digital Ocean has $5/month+ packages. Go for an SSD one if possible. Unlimited bandwidth usually comes with a 1TB cap. Trust me I hit this every month for my clients. 1GB costs about LKR 10. No big deal.
Use Amazon EC2. 1 Year free tier. 1GB dedicated instance + spot instances.
The "security" is just bullshit machan. they can't protect your sites. Nobody can. You just write secure code, run a good firewall, and prey to every god you know that the shitload of bots won't attack you. A 24 year guy who pays 20 bucks to the reseller hosting provider who can't even do anything without cpanel or any GUI control panel can't protect you no matter he charges 30k a year or a zillion.
yeah thats why we take weekly backups
shit happens everywhere bro

