dolphin was never and will never be writen for shared hosting.
you have shared hosting. your shared hosting is what caused your site to be vulnerable, not dolphin, dolphin has passed security testing, ok we can say that no security is perfect, but if you host your site on a host that has far below the minimum requirements, we can safely say you are mostly to blame

cronjobs are set to 666 while you install them then at the end of the install you reverse them to 644
then they can not be changed, see more unless your server was corrupt before, or hacked after the install.

most servers are hacked by (script kiddies) using old tools to prove they can hack, so they can join a boys club.
its kinda like trying to prove they can ge inside some pussy because they are cool and can talk their way into anything.
when infact, any smart girl would know they cant bluff their way out of a wet paper bag