Got to be aware of WordPress security.

The ultimate solution would be hosting with someone like WP Engine but that's a little beyond my reach so I use a good host and pay for Sucuri monitoring.

"Like backups, good security is an absolutely essential, non-negotiable part of every WordPress site."

How true is that.