For all its many merits, WordPress is weighed down by themes that are bloated and overdone, like 20th century web pages with tiresome animated graphics and far too many fonts.
Here is a list of themes that get it, letting the content take centre stage. This list will grow over time.
If you want to get into WordPress, and want to tweak the themes a little, you'll need do understand a little bit about how themes work. These resources will help.
Securing a blog is essential.
Here are some resources presented to point you to further information on how to do this.
An article at BlogSecurity.net points us to a plug-in that will change the table-prefix of the MySQL database tables used by your blog.
This step contributes to the security of your blog by letting you swap the default (and thus obvious) 'wp_' table prefix for something obscure that a hacker could not guess at.
Remember that if your WP installation does not have error reporting turned off an attacker may yet be able to force your installation to reveal critical information by forcing an error and reading sensitive database information from the error messages.