wordpress.org is the defacto standard right? set plugins and themes to auto-update, add wordfence and change default settings. use updraft or similar to pull

wordpress.org is the defacto standard right? set plugins and themes to auto-update, add wordfence and change default settings. use updraft or similar to pull full backups on a schedule.