If I really need to master all of the steps that you’ve described before deploying my host on the Internet, then my conclusion is that it is more trouble than it is worth, because my concern is that if I screw up then I will make the Internet a worse place by contributing to botnets.

Nah dude. You're not going to make the internet worse because a bot opened a door you thought was locked and let himself in. That's rubbish. Do some reading, study up, deploy the server. Monitor before you start putting any PII on the server. Deploy a couple fun Docker containers. Monitor. Build your confidence.

Don't let fear get the best of you. I have a load of fun with my set up as, like you, I love to tinker. Nothing I have done can't be replicated through studying, asking questions, deploying in gradual steps. I have no certifications or any of that pro stuff some of these guys have. Just a regular schmoe. It really isn't that much hassle once you get everything set up and you have confidence in your server's defenses.

DO IT!!!