If you don't have good protection on your website files can easily get lost. Some of those files might be stored on your computer and easily replaceable, but what about the rest of them? If you lose them the first time where are you going to get them from again? Especially fix hacked wordpress is vital. Many times, long-term sites have made a large number of documents and have a lot of data. Recreating all of that are a nightmare, and not something any business owner wants to do.
I might find it somewhat harder to crack your password if you're one of the ones that are proactive. But if you're among those ones, I might get you.
You also need to set the"Anyone Can Register" in Settings/General to off, and you ought to have some sort of spam plugin. Akismet is the old standby, the one I use, but there are lots of them these site here days.
It is really sexy to fan the flames of fear. That's what journalists and bloggers and politicians and public figures do. It's terrific for readership and it brings money into the war chests. Balderdash.
Do your homework and some hunting, but if you are pressed for time and need to get this done once and for all, try the WordPress safety plugin that I use. It is a relief to know that my website (and business!) are secure.