Security does not have to be complicated. A few habits protect most sites.
Keep Everything Updated
Run the latest WordPress core, themes, and plugins to close known holes.
Use Strong Passwords
Unique, long passwords and two factor authentication stop most break in attempts.
Install a Security Plugin
A good security plugin adds a firewall, malware scanning, and login protection.
Back Up Regularly
Automated backups mean you can recover quickly if anything goes wrong.