cPanel IS fantastic for a layman like myself.
However, I was with BlueHost for just under a year and in that time I got DDoS attacked.
They weren't set up to handle it at the time (a couple years ago) so when I called tech support to find out why my website had gone down, they seemed to be going nuts and were incredibly rude.
Had to actually call back a few times to get an idea of what was happening and what I could do - only got the info when the lead guy got on and said quite angrily that I was, quote, "bothering" his "guys".
(Keeping in mind I had no idea why my site was down at that point, why I was locked out of the aforementioned cPanel and everything else, or why I'd recieved an e-mail about my account being cancelled.)
The woman I spoke to about the cancellation of my account (they passed me off to a scripted "divorce" specialist of some sort) she just continually tried to steamroll me, rattling off the pre-written information despite my constant injections of "Excuse me... Excuse me... EXCUSE ME..."
Finally got a word in edgewise and managed to convince her to actually
tell me how to get my files off their machine.
Then when I asked why they penalized ME for someone else DDoSing my site, she said, exact quote, "Well WE don't know why they attacked you!"
In other words, maybe I deserved it - how should they know?
A while later I went to their forum to post about my experience and found I'd been pre-emptively banned from posting, presumably back when they realized I was mad about the ordeal.
Years later, I found some
private Bluehost tech support chat logs on a tech support employee's blog where she openly made fun of customers.
It had personally identifiable information, including my name. I contacted BlueHost about it (her site was hosted with them, naturally) but they wouldn't do anything about it - supposedly because my name had initials and my last name.
Keeping in mind that "L.L. Lastname" combined with my domain name mentioned in the log identified exactly who I was.
After BlueHost told the employee about my request for removal, she added more instances of my name and invented interesting pieces of the story in order to make herself seem like a victim.
It's still up as far as I know.
So... er... I wouldn't recommend BlueHost.