Everyone hates security. Security means extra work. Lots of it. You need to monitor security announcements, apply tedious upgrades (even though they may break your site), and review plugins carefully before you install them. No fun.
But what's the alternative? A broken or compromised site. You want your homepage to stay the way you left it, right? Not get defaced by a Mongolian teenager? Then you'll need to learn about security.
The first step to staying secure is staying informed. Any good CMS, and any good extension, will have regular security updates. But they won't do you any good if you don't hear about them. Learn how to find and subscribe to security announcements for every moving part in your website.