Why does the HOSTER need to add their IPs to my "Remote access to MySQL"?

Question

MySQL

Found on my hosting the left IP in the exceptions for "Remote MySQL". Removed. Changed passwords. They reappeared. I asked the hoster a few questions, he answered everything, but he declined about remote access ( maybe just such a staff ).
Asked them to disable these auto-tunings. Answer:

We cannot disable remote access specifically to your databases. This is a feature of shared hosting.

Tell me, please, does the hoster really need remote access for something? My hosting is virtual, CPanel. Is there anything else that needs to be added for information? And, are they really unable to turn it off or just don't want to? Nobody faced?

Here's what they just answered:

You have the right to rent a virtual server, where you can configure access as you need.

But I want to note that in order for someone from outside to be able to connect to your database, several factors must be observed:
1. The IP from which the connection will be made must be in the list of exceptions. We make this setting.
2. The person connecting must know the name of the database, the user of the database, and the password of this user. Access without a password is not possible.

If you use normal passwords (at least 8 characters long, not dictionary phrases), then the likelihood that someone will gain access to your databases is virtually zero.

Answer 1

Technically, you can restrict access to your database
. Another question is that config templates may not be suitable for this.
In your question, you should just reduce the paranoia, put a more powerful password and that's it.
Some people may need access because it is convenient during development, you can immediately access the database directly through utilities.

Answer 2

If you use shared or virtual hosting services, then the technical staff of the hosting provider services, incl. and you MySQL. And you pay extra for it, it's included in the tariff. Don't disturb them.
If you have a virtual server service (VDS / VPS), then everything inside your server is your own business.

Answer 3

Backup monitoring