Cloning your site is another level in fix wordpress malware cleanup that can be very useful. Cloning simply means that you've backed up your website to a totally different location, (offline, as in a folder, in order to not have SEO problems) where you can get it at a moment's notice if the need arises.
It will start with the fundamentals. Attempt to use complex passwords. Use special characters, numbers, letters, and spaces and combine them to create a password that is unique. You could use.
Should you ever want to migrate your site elsewhere, like a new web host, you'd have the ability to pull this off without a hitch, and also without having to disturb your old site until the new one was set up and ready to roll.
You may extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think this plugin is a good choice and you can use it.
You do think about needing security, when your site is new but you do need my sources to protect your investment and yourself. Having a site go down and not having the ability to restore it may mean a loss of customers who can not find you and probably won't remember to look for your website later. Don't let this happen to you. Back up your site after you get it started, as the site is operational and schedule regular backups for as long. That way, you will have WordPress security and peace of mind.