Even just with WordFence you will have good security / the same as with iThemes Security -> it have some good extra premium features like 2FA (2Factor Auth), and can enable Captcha for comments, login, registration (that will kill 60% of comment spam).
If you dont use comments (then you dont need SPAM, comments etc plugins)…
If you need security then iThemes + WordFence is good free mix, if you go premium, then I would go with iThemes Security or even Securi Security (its great plugin).
+ Before anything else, the important part is secure password and some good Password Manager (like LastPass)
]]>For spam, I like “Antispam Bee” and I use Google invisible recaptchas on all forms.
]]>