WordPress 5 is a major update, and has a new editor that may affect your site. If you're already using the built-in editor, the upgrade shouldn't be an issue. Non-standard editors may cause some compatibility problems and we should take a look to see how your site may be affected.
It's not necessary to upgrade right away, and we recommend waiting until it's been tested in the world at large and found to be stable.
Your website should be using https for security. Google likes it, and browsers are starting to cause trouble for sites that are not using it. Many modern hosts have a free certificate that you can use (Let's Encrypt). If your host doesn't support the free certificate, you can purchase one and have it installed.
It's extremely important to stay up-to-date with your plugins and themes. In most cases, we have installed on your website a security plugin called Wordfence, which emails us when updates are available. Let us know how you would like to proceed with updates.