[corrral]

Easiest is probably a dedicated WordPress hosting provider like Kinsta or WPEngine. More expensive, but they definitely take away $20-30/month worth of hassle and worry. Stick a free CloudFlare plan (they have some WP-specific security and caching options, IIRC—if those are available on the free plan, make sure you turn them on) in front of it and block admin and API paths except from allowed IP addresses, then turn on auto-updating (plugins and core) in WP itself, if you want a reasonably secure and low-effort site that can survive occasional large traffic spikes without sweating. May have to tweak a couple settings to make sure it's serving from CDN nearly 100% of the time, but once that's done, it's done.