clean hacked wordpress site will even tell you that there's no htaccess in the wp-admin/ directory. You may put a.htaccess file if you desire, and you can use it to control access by IP address to the directory or address range. Details of how to do this are available on the net.
You can search. If hackers abruptly hack your website, it is easy to restore your site by means of your backup files and change.
I don't think there's a person out there that after learning just how much of a check over here problem WordPress hacking is that it is a good idea to enhance the safety of their blogs. But something I've noticed over the years is that when it comes to securing their sites, bloggers seem to be stuck in this state that is reactive.
It's really sexy to fan the flames of fear. That is what bloggers and journalists and politicians and public figures do. It's terrific for readership and it brings money into the war chests. Balderdash.
Utilizing a plugin for WordPress security just makes sense. Backups need to be performed on a regular basis. Don't become a victim of not being proactive about your own 16, as a result!