Their stuff is all around the internet.
That exactly is the “agent based service” they install their serverpilot agent on to your server which is a threat in itself. It runs with root privileges on your server and not too long until one of their employee does something like cloudways and injects your servers with malware.