If you do not have good protection on your website, Documents can easily get lost. Some of those files may be saved on your computer and easily replaceable, but what about the rest of them? Where are you going to get them from again, if you lose them the first time? Especially how to fix hacked wordpress site is vital. Long-term sites have a good deal of data and have made a number of documents. Recreating that all are a nightmare, and not something any business owner would like to do.
If you're among the ones, I might find it a little more difficult to crack your password. But if you're among those responsive ones, I might get you.
Exclude pages - This plugin provides a checkbox,"include this page in menus", which is checked by default. If you uncheck it, the page will not appear in any listings of webpages (which includes, and is ordinarily restricted to, your More about the author page navigation menus).
You may extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think this plugin is a good option and you can use it for free.
Those are three things you can do to maintain WordPress secure without plugins. Put a blank Index.html file in your folders, run your web host security scan and backup your entire account.