invest your time in it. the more time you invest in steemit the better your results are. dont do it for money, do it for engagement. its an emerging community of likeminded people and its fun to engage with other people, reading their posts and sharing experiences.
cant say much about security. steemit has not been hacked since i started using it and if you keep your keys safe and dont use share computers or internet you should be good.
i agree on one part : you should do what you are , not what you think will sell, but anyone here who tells me they're not here for the money are either born rich or slightly bending the truth to look better lol , thats what i believe anyway
as for security, ... i think its a miracle no accounts have been compromised yet, granted the passwords are complex enough but it takes just one trojan (or local access to get round that)
but you are totally right, i havent heard about a breach yet either
all for the better