There are certain things I just don’t do to make my site more secure, because I don’t think they matter. There are others that I do, because I think they do matter. I guess the time to post about this is now!
Protecting your website can come in many flavors. I’ve always learned towards doing as much on the server (vs in the ‘app’), but the new trend of external services that speed your site up and protect you confuse me.