Self-hosted website publishing platform.
WordPress does not encrypt any of your data by default.
Using avatars in WordPress will activate Gravatar, which will send your email address to gravatar.com. Avatars are activated by default and can be turned off under "Settings > Discussion > Avatars".
The default WordPress themes force your visitors to download Google Fonts. Consider switching to a completely self-hosted theme. You can also install the plugin “Disable Google Fonts” to remove this vulnerability.