It'd be nice of sFTP (not ssh shells) were enabled for free accounts. You can have only sFTP without allowing an ssh shell too.
If that isn't feasible then FTP with SSL would be a nice alternative.
I've seen botnets with trojans in the wild that are stealing FTP credentials by...