So this kinda validates any employee at Afrihost can access all your emails, nice.
So here is a fun question for you to ponder: How does an agent validate or confirm consent? How is this authenticated, or logged? Because, you do, right?!
Food for thought, if you will.
Everything is logged. Calls, sms, WhatsApp, email/tickets, if they access your profile on their system, if they log into cPanel (it is via your profile) it's logged.
Everything their staff does is logged.
They also have no access to login details. Afrihost uses keys to authorize the login to the server backend or cPanel, meaning that once the agent leaves the key is deleted so they can not use it to log in again. That is also how the login to cPanel works from ClientZone.
FTP and cPanel password reset is only available to you. They can not reset or view it.
I have tried, and failed every time, to get them to change email passwords for me. I was told under no circumstances. You have to do it yourself.
When doing troubleshooting, I am asked for permission to log in and do a test. I have a test mailbox created for this purpose on my domains for that purpose anyway.
I understand your fears of security in this day and age, but, I feel my data and account is safe.