Re. security plugins, I am using Bulletproofsecurity Pro as a security plugin on all my WP sites, and three I’ve moved to CP with no issues. Developer is supportive of fixing issues if they arise - see thread at
BPS Pro is a one-off payment for unlimited sites at very reasonable cost, and there’s also a free version.
Its fairly complex at first, but very full-featured and effective