WordPress is a safe Content Management System and website builder. But, that does not mean it is safe from vulnerabilities and threats. Thus, just like any other CMS, it is absolutely necessary to have a secure wesbite that can handle different attacks and threats today's websites face.