Using a shared hosting provider is a choice you're making there though. If you know you're going to be managing legacy codebases for a while you're far better off spinning up your own box on cloudlinux, which has PHP security patches going back to the early 5.x releases.
It's unreasonable to expect standard hosting providers to cater to those kinds of needs IMO.