How secure is WP on a DO droplet with EE?

Totally new to this (and missing a good search function on this forum, so sorry if this has been covered over and over…just point me in the right direction and I’ll do my reading quietly)

I intend to setup a droplet with DO, install EE and run WP.
WP will be updated daily for core, plugins and themes.
For EE I will command update once a week (more often needed?)

Will this keep my sites safe or is additional security/hardening needed? If yes, what’s needed?

Thanks in advance!