So yes, as others have said: ignore KMKPro as that's nonsense. What is dangerous is un-patched software. If your WordPress is not updated then yes, it becomes vulnerable. The good thing about WordPress though is that it has built-in effectively 'one click' updates, so as long as you're doing that fairly regularly (and maybe use CloudFlare as a security shield) you ought be fine.
..oh regarding 'one-click' though, personally I don't use Fantastico or the others as they wont properly track your internal WordPress upgrades. They'll later tell you, and your host, that you have an old version on when you don't. A few years back GoDaddy caused a mess by failing to help clients who were hacked through a rare exploit. It blamed the clients for not updating, but they were using the Fantastico details which were wrong.
Other tips:
Content is good for the sake of it, but good and regular is better. I'd rank them - Content, Good Content, Regular Good Content. Google likes it if people like it, if it's engaging (so people would like it). Regular news tid-bits would be enough to be valuable to an extent, but ideally you want things that other people would like to link to.
Finally, I would host it on your site. It hosted externally it has a limited value because beyond a point Google doesn't care about links from one domain to your site, especially if it establishes it's something you're operating (and it probably will. Google, unsurprisingly, are not daft).
..and if you do DON'T put it in a subdomain like blog.yoursite.com, put it in a subfolder like yoursite.com/blog/. The former is treated as a completely distinct domain by Google so you'll get zero SEO benefit from it.
