I just retired from a 40+ carreer in computer networks, technical support and computer security. I have multiple websites setup, for my extended family, groups I belong to and some musician friends.
Get a domain. domains.google.com or namecheap.com are some registrars I use. You can also get your domain from the web hosting companies you use, such as GoDaddy or DreamHost. Don't bother getting a dot com. I have used .info, .us, .xyz. It will be cheaper, aroung $15/yr. They stopped charging for hiding your information a few years ago so you don't have to pay extra for it.
Once you decide on a domain name, you will then have to decide on a web hosting company. I use and recommend DreamHost but there are others you can use such as GoDaddy, A2Hosting, Bluehost, HostGator, NameCheap etc. For a simple site, expect anywhere from $2.50-$5.00/month.
For the most secure websites, get one without a database. There are different ways to go here. One that I use is called Hugo, which is a static site generator. That means you create you site locally on your PC/Mac and then upload the HTML directly to the web host. You pick the template that you want to use and write you content in text files. While this is most secure, it limits what other people can add as they will need to go through you.
The next step up is a flat file CMS. An example of this would be Grav. This also uses text files and has no database but it is all done remotely on the web server. Grav also has templates like Hugo and like Hugo is free software with no ads. You can have multiple people access and update the site.
The next steup up is a full CMS with database, the most popular being Wordpress. All web hosting companies support Wordpress and there are many templates and plugins. This starts getting more complicated as some templates and plugins are free and some cost money. You now have a database that keeps track of your site and allows multiple users to access and update it. It is the least secure because you need to update the plugins and Wordpress software as outdated software is one of the major ways (besides weak passwords) that allow website to be hacked.
Finally there are website builders. The big three are Squarespace, Wix and Weebly. They are the most expensive and also the most all inclusive, basically your one stop shop for building websites. They all offer various levels of features and ease of use vs cost. Some hosting companies, such as GoDaddy, have their own website builder software but it usually isn't as robust or user friendly as these three.
