How secure are wordpress sites
I guess the official answer should be obvious. They are as secure as possible. All the security measures taken thus far like not allowing JS or HTML codes on Forums should be indicative of how secure WP is!!!.
As to your other matters like where to buy SSL certificates etc, I guess your registrar should be your first "port of call". However, how are you going to incorporate it on WP blogs is something I don't know because there isn't much you can do on these blogs.
WP started a free service and it is only recently, slowly but surely, they are developing it as a true business model to monetize all the 75 million people currently using the system.
Hope this proves useful but I am sure you will get somebody who will have a different answer to mine..