I've always wondered if I should apply any of the measures. I use Wordfence so thought it was redundant. Does anyone use them? They include options like blocking unauthorized access to xmlrpc.php and .htaccess.
There are many plugins and WordPress Managers offering same set of Security features.
Sometimes you need to install multiple plugins which offer individual settings and configure them all.
Further when you have multiple websites to manage you can use the WordPress Manager Security Settings to apply these settings on all sites at once by one click against configuring settings by logging into each sites.
You can use any method to secure the site as per your choice. The end goal should be that the sites are secured.
Implementing additional security measures like blocking `xmlrpc.php` and protecting your `.htaccess` file isn't redundant with Wordfence; instead, it creates a crucial **layered security** approach. While Wordfence acts as a strong application-level firewall, these server-level blocks proactively stop malicious requests and reduce your attack surface before they even reach your WordPress installation, thus enhancing overall site security and efficiency.