I pay about $75 annually for domain registration and hosting, including a website building tool called "Site Studio". Pretty much on my own as support service from my host is minimal, sometimes questions get completely ignored. Wasn't easy for a non-techie old guy to get up & running, but a lot of trial & error eventually got it done. A Paypal shopping cart wasn't too difficult to integrate and so far has worked OK.
Recently, my files size grew from actual 30 mb to over 2,200 mb increasing daily. My host suggested my files had been hacked and offered little advice except to start deleting questionable files. Well, it was learn on the job again and I managed over many days to select and delete the extra 2,000+ mb among which were .php application files which I THINK were the intrusion gateway. There were all kinds of other business including porno files stored in both intruded and legit folders.
So, I would advise including hacking security as part of your hosting package. I don't think I can recommend my hosting service, but I'm in too deep to start over. I now have to frequently check my files for signs of hacking, in fact I'm going there right now.