Is it hard to really secure your website or is it really hard to do it? Both, actually.
That is, you should update. It is strongly recommended, as always. According to WP Core Contributor Aaron Campbell, 4.7.1 is a security release for all previous versions.
What special powers does Wordpress have that still make it the most popular platform there is?
Try to google “Wordpress powers”.
The web host you’re currently using is too expensive, or it experiences downtime every now, then and again. Or it is too slow to handle all of your traffic. Or it isn’t really secure, as you would want it to be. Or it takes too much time to resolve those normal, mundane things that we euphemistically call problems.
Before the year 2017 knocked on our door, Wordpress released their new update, as is tradition. They named it after jazz diva Sarah Sassy Vaughan. Adequate enough, for the reasons you’ll come to understand the moment you press “Update”. (Be sure to backup before that, though.)