“By practicing” is not a good way to get good at security, unless you want to make potentially devastating mistakes along the way.
It depends on what you put at stake, obviously.
How else can you get good at security? I guess you could read, but at some point you'll have to practice. And I never said you need to practice with sensitive information.