Hi Mike,
Not sure exactly what the issue is here but I'll see what I can do.
1. You don't need SSL certificates to secure your sites from hacking per se, you need a strong host and service like https://sucuri.net.
An SSL cert encrypts the data between the user and your site and let's the user know that they are in fact giving their information to you and not some spoof. So it is a great idea for any site that asks for user information and allows users to login but it's not 100% necessary.
2. An SSL Cert IS necessary if you are processing payments through your site however you are not doing that at the moment. You're using PayPal standard which sends the user to the PayPal.com site to take care of payment, so an SSL cert isn't required.
To move to PayPal Pro you do need an SSL cert, you also need to signup for the PayPal pro option with PayPal which is $30(ish) per month on top of fees. (FYI, we use Stripe.com for payments, much easier, works with WooCommerce as well).
Do you have a specific questions beyond these answers?
Good luck.
Ben