Security plugin recommendations?

My baseline list is almost identical to yours.

Rank Math here too — the schema options alone are worth it.

Cloudflare plus a light cache plugin is enough for most small sites.

Good point, I had not thought of it that way.