Hi Jolie… #2 and #3 in that article are conventional wisdom.
#1 may or may not be a good idea. It depends on several subjective factors.
I do lots of security training and one thing that consistently comes up is all the different and potentially confusing information out there.
Steve was able to juggle the schedule so that I can give a presentation on WordPress security at the NYC meetup on Tuesday 6/18.
Preview… details, processes, code, Q&A and tools from the front line of repairing & securing hacked sites and protecting WP from exploits… 1400-plus sites – zero hacked or re-hacked!
There’s always room for variation and innovating however, it will be good for everyone to have a foundational security process that works… and then experiment from there.