I've had two WordPress blogs. That was in a time when I was doing virtually no internet advertising, and until I found time to handle the situation (weeks later), these sites were penalized at the major search engines. They were not eliminated the evaluations were reduced.
I back my blogs using a plugin WP DB Backup up. I can always restore my website if anything happens. I use my site to be scanned by WP Security Scan free plugin and WordPress Firewall to block asks that are suspicious-looking to fix wordpress malware plugin.
You can look. If hackers abruptly hack your site, it is easy to restore your website with the use of your files and change.
Keep control of your assets - Nothing is worse than getting your livelihood in somebody else's hands. Why take chances with something as important as your website?
Can you view that folder Imagine if you go to WP-Content/plugins? If so, upload this blank Index.html file inside that folder as well so people can't view what plugins you might have. Because even if your current version of WordPress is current, if you are using an old plugin or a plugin using a security hole, someone can use this to get access.
The plugin should be updated to remain current with the latest WordPress release, Look At This play nice and have WordPress cloning and restore capabilities. The ability to clone your website (in addition to regular copies ) can be helpful if you ever want to do an offline site redesign, among other things.