Strikingly offers a free, embedded SSL certificate for every website, so you do get at least a minimum level of protection. That said, you have to run your own malware checks and create regular backups of your site to keep it safe from malicious attacks.