I had used WordPress sites for many years until a few months ago when I was severely hacked. I had no idea how bad it could be. I spent hundreds of dollars contracting my web host techs to un-do the hacking, but in the end, I had to start over from scratch because I no longer trusted the website, whether it was "fixed" or not.
From the warnings on the plugin, I know that all green lights do not guarantee not being hacked, but after reading all the explanations at every checkpoint, I feel better knowing the risks involved with the items I could not or chose not to pursue.
The firewall is a fantastic value in itself, and the IP block list is something I genuinely appreciate, given my past experiences.
It's an excellent plugin and a tremendous learning experience in cybersecurity and WordPress internals without burying me under the minutiae (which I did not want to happen). I am so glad I got this plugin.