I have had two WordPress blogs hacked into in the past. That was at a time when I was doing very little internet marketing, and until I found time to address the situation (months later), these sites were penalised in the search engines. They were not removed, but the rankings were reduced.
Finally, fix malware problem will even tell you that there's no htaccess from the wp-admin/ directory. You may put a.htaccess file if you desire, and you can use it to control access to the wp-admin directory or address range. Details of how to do that are available on the internet.
You can search for software that will backup your files and database. If your website is suddenly hacked by hackers, you can restore your site with the use of your files and change.
Keep your WordPress Installation up to date - One of the simplest and most valuable tasks you can do yourself is to make sure your blog WordPress installation is upgraded. WordPress gives a notice on your Get More Information dashboard to you, so there is really no reason.
Take note of your new password for the next time you sign in! I recommend the paid or free version of the software *Roboform* to remember your passwords.
The plugin should be updated have WordPress cloning, play nice with your plugins and to stay current with the latest WordPress release and restore capabilities. The ability to clone your website (along with regular backups) can be helpful if you ever need to do an offline site redesign, among other things.