Ultimately, clean hacked wordpress site will inform you that there is no htaccess within the directory. You may put a.htaccess record into this directory if you would like, and you can use it to manage usage of this wp-admin directory by Ip Address address or address range. Details of how you can do that are plentiful around the net.
Also, don't make the mistake of believing that your hosting company will have your back as far as WordPress backups go. Not always. It's been my experience that the hosting company may or might not be doing proper backups while they say that they do. Take that kind of chance?
Yes, you want to do regular backups of your find this website. I recommend at least a weekly database backup and a monthly "full" backup. More. Definitely more, if you make changes and additions to your website. If you have a community of people which are in there all the time, or make changes multiple times every day, a backup should be a minimum.
BACK UP your site frequently and keep a copy on your computer and off-site storage. For those who have a website that is very active, back. You spend a whole lot of time and websites money on your website, don't skip this! Is BackupBuddy, no back up plugins, widgets, your files and database. Need to move your website this will do it in less than a couple of minutes!
You do think about needing security, when your website is new but you do need to protect your investment and yourself. Having a site go down and not being able to restore it can mean a loss of consumers who probably won't remember to search for your website again later and can not find you. Do not let this happen to you. Back your site up as soon as you get it started, as the site is operational, and schedule backups for as long. That way, you'll have WordPress security and peace of mind.