I agree providing ftp details directly is just a no no… its just not done… I am sure you guys are on the up and up and are just trying to make things better for everybody, So how to do it?
2 options…
1) have a paid for service, secured by a NDA and contracted agreement for performing the changes under your care including once only (includes customer randomising password after done) and ongoing service to keep up to date… I know many of my clients would pay a few dollars a month to have this outsourced… including me cause I find it a headache.
2) Have a free service supported by advertising that takes you to a site suitable for admins with step throughs or video tutes… That should satisfy both the DIY security guys and commercial (i haven’t got the time) type admins…
Anyway thats my two cents..
cheers
Ben