It would 100% recommend HTTPS. You can follow this guide for WP:
HTTPS / TLS is secure. The exploitable vulnerabilities come from other places (namely bad and outdated code).
You will need to find an external mail provider (like Cloudflare for incoming mail). InfinityFree does not provide email services.
7 Likes