Your main site should never be on customers shared servers IMO. You are setting yourself up and if you have issues with a server that takes down your primary way of contact for your customers. If their site is down and yours is too how can they get support?

The storing of card numbers is quite encrypted in MB and with their new LEK system it is dual encryption methods to view the cards. Though not foolproof it is quite secure.