If I have a VPS (on digital ocean) running debian and I share root access to this server via SSH keys or root password with someone, can that person hold my website (the thing that is being hosted on the server) hostage? That is, they have as much access as I do.
Can't I just reset root password and remove all SSH keys to ensure it is safe again?
Otherwise, could I just spin up a new VPS and re-upload all the site code/database and start fresh?
Someone told me the only solution was to throw everything away including the code (magento php code) on the server and start from scratch, but I think this is overkill.