I'm a web developer, and don't know much about system administration and security. Would it be possible for me to set up a site that processed credit card payment, payouts, bitcoin payments, or other private activities while using a managed host or outsourcing the security and administration, without sacrificing security?
Of course, I could use APIs, such as Stripe, to process payments, but that doesn't mean someone with access to my server won't go using the secret API key to charge customers and other such misbehavior.
In summary, how do small startups without a security/system administrator on board deal with security/administration, without jeopardizing its users?