As another security interested person (who does not claim to be anything remotely near an expert), my suggestion is to have a static site, generated using something like Jekyll. Most blogs don't need server-side code running, and Disqus works great for comments.