A normal available .com is usually not expensive, often around the low double digits per year. And yes, domain security is important: 2FA, correct account email, and renewal reminders are basic but very important.