Sites defaced on server. How?!

[Traged1]

there is always a delicate balance between usuablity and security. if you feel the need is great enough to remove it, then do it. But you will need to decide that yourself. Also, even with mod_sec installed no security model is ever 100% fools proof.