If it's not worth you paying a proper developer to make and maintain a secure website then I'd it really worth the hassle of even taking your hobby store online? You can get an EV cert and a basic store setup on a ssl host for a couple of grand easily.

If that stops you losing 5% of your customers then you are already winning IMO.