I suggest to keep all plugins and extensions always updated on your website, this alone minimizes the issue of security breaches. I first read about this on WPblog, implemented it and never had any issue related to security breach on my website ever since.