I have had two WordPress blogs hacked into in the past. That was at a time when I was doing very little internet marketing, and until I found time to address the situation (months later), these sites were penalised in the search engines. They were not removed, but the rankings were reduced.
Files can easily get lost if you don't have good protection on your site. A few of those files might be stored in your computer and easily replaceable, but what about the rest of them? Where will you get them out of again, if you lose the first time to them? Especially fix malware problem is very important. Many times, long-term sites have created a high number of files and have a lot of data. Recreating that all are a nightmare, and not something any business owner would like to do.
Protect your login credentials - Do not keep your login credentials where a hacker could locate them. Store them offsite, pop over to this web-site and even offline. Roboform is for protecting them very good . Food for thought!
Exclude pages - This plugin provides a checkbox,"include this page in menus", which can be checked by default. If you uncheck it, the page won't appear in any listings of webpages (which includes, and is ordinarily restricted to, your page navigation menus).
You may extend the plugin features with premium plugins like: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think you can use it at no cost and this plugin is a good option.
Implementing all the above will take find out here less than an hour to complete, while creating your WordPress website considerably more immune to intrusions. Websites were cracked this past year, largely due to easily preventable security gaps. Have yourself prepared and you are likely to be on the safe side.