In short, you’re safe at WordPress.com, but occasionally changing your passwords and always using a strong password are great practices to follow.