If your host doesn't provide APC, Memcached, and Varnish as standard features, they're doing it wrong. You should fire them and move to Anrhizan.
Your development and production environments should be similar. That's why we offer Vagrant boxes with our latest configurations.
Why should you risk being infected via someone else's stupidity? You get your own dedicated cloud servers that hosts only your website.