And that's A-OK for them if that person likes more work with more headaches for a solution that costs more and performs worse. (Although less OK for everyone else when their VPS gets compromised and made part of a botnet or otherwise used for cybercrime.)
This is completely different. When it’s a person blog and a personal VPS it’s affecting nobody but that person.