You want (or have) a website, with processes in place for development and maintenance but are concerned about site security
[10 Mar 19] The biggest threat to data privacy and cybersecurity
[7 Mar 19] The Ultimate WordPress Security Guide – Step by Step (2019)
Includes Keep WordPress updated and install backup (Updraft Plus, VaultPress), security: Sucuri Scanner. Enable Web Application Firewall (WAF) and move to SSL/HTTPS. Change Default username, Disable file Editing and PHP file execution, add security login questions, limit logins and add 2FA. Change database prefix and password protect WP-Admin and login, disable Directory Indexing and browsing, and XML-RPC . Auto boot idle users, scan and fix a hacked Site
You can’t install plugins on WordPress.com on their free plan, but you can on a self hosted WordPress.org site (see: WordPress.org vs WordPress.com). Before switching from WordPress.com to WordPress.org, read how to properly move from WordPress.com to WordPress.org. You’ll need a WordPress hosting account and a domain name; choose one that has servers in your target area.
[16 Feb 19] The Ultimate WordPress Review – Is It the Best Choice For Your Website?