Thanks, I understand they're looking for a way where server customization isn't necessary, you mean?
It is easier to get things done on hostings that we manage ourselves than having to change things on designated hostings. If only because we are sometimes not the contract holders of those hostings.
I've read you can disable mod_security in htacces by the following code, however not all hostings allow this due security reasons and is considered as unsafe
“We will not recommend to disable Mod-Security on your account. Modsecurity module helps to protect your website from various attacks. If mod-security is disabled on your account, your website will be at risk from vulnerabilities. Once modsecurity is turned off for an account, we will not take any responsibility of hacking the domain, database hacking, data manipulation and other activities which modsecurity can prevent.”