Your hosting provider does not protect you from malicious traffic, read your contract! The security is passed on by the hosting providers to the website operators. The technology is subject to permanent changes. Not only the WordPress platform is regularly updated, but also the installed plugins for the newsletter, webshop and catalog have to be kept up-to-date in order to be as good as possible against hacker attacks. It is a permanent race against evil, in which one has only one chance, if one knows the tricks of the hackers and their tools and successfully defends them. As with a house with a garden, the website has to be maintained around the year.