some simple security measures without all the performance traps

Because every WordPress security plugin I've ever looked at has been bloated, problematic (breaks websites), ill-informed, and prone to security vulnerabilities. And I needed some options for Apache-hosted clients.