Most hosts include this for free. Hostgator, my preferred host, does.
GoDaddy has developed a reputation in the infosec community for being extremely careless about security, not responding to reports of security compromises on sites they own, and permitting sites to remain compromised for extended periods of time--sometimes months.
They used to have one of the best reputations in the industry. Since the sale, and subsequent push for higher profits, they have come to see security as a revenue stream, not as something that's part of a hosting business. Their security and abuse team has been reduced (because they cost money rather than generating money), and they have turned to selling "security services" that were once part of the cost of doing business as a hosting provider.