Posted on : 2022-06-29 17:32:51 View Type: public
Samar Rafique

Hey WordPress toolkit is actually trying to sell you their premium add on so its your choice if you want to buy that or not. And the items they are recommending i think you don't need. Your site is properly backed up and is using WordPress standard practice so its secure. Additional steps are not needed. Like
Restrict access to files and directories | ||
Block directory browsing(can be reverted) | ||
Block unauthorized access to wp-config.php(can be reverted) | ||
Disable PHP execution in cache directories(can be reverted) | ||
Block access to sensitive files(can be reverted) | ||
|
So in my view you can just keep your WordPress updates, Plugins updated, Themes updated and you can use https://wordpress.org/plugins/wordfence/ Wordfence WordPress plugin to keep your site secure from malwares.
So there is no additional step needed. Thanks.