Cloning your site is another level in clean hacked wordpress site that can be useful. Cloning simply means that you have backed up your website to a completely different place, (offline, as in a folder, in order not to have SEO problems) where you can get it at a moment's notice if necessary.
I might find it a little more difficult read the article to crack your password if you're among the ones. But if you're one of the ones that are responsive, I might just get you.
Exploit Scanner goes through the files on your site additional info database, comment and place tables. You are also notified by it for plugin names. It does not remove anything, it simply additional hints warns you for possible threats.
It is really sexy to fan the flames of fear. That is what journalists and bloggers and politicians and public figures mostly do. It's great for readership and it brings money. Balderdash.
Don't use wp_. Most web hosting providers are currently eliminating that default now but if yours does not, adjust wp_ to anything else but that.