invest your time in it. the more time you invest in steemit the better your results are. dont do it for money, do it for engagement. its an emerging community of likeminded people and its fun to engage with other people, reading their posts and sharing experiences.

cant say much about security. steemit has not been hacked since i started using it and if you keep your keys safe and dont use share computers or internet you should be good.