If your site is recent you shouldn't be bothered by SPAM often, which is my case, so in the meantime you can trust basic XenForo functions like Captcha systems.
Regarding forum security, I haven't heard of any issues there so I don't think you should worry about that at this time.