Who handles security and updates on Podspun?

We do. There is no plugin stack to patch and no server to watch. You publish episodes the way you already do, and the site stays current and online.