how to keep my wordpress website secure ?

i had before about 5 websites with different hosts, and all of them were hacked even though i had

• Wordfence on all of them

im hosting now my main site on google cloud, its getting 1500-2000 traffic everyday, and im really afraid its going to get hacked again, i worked hard on the content of the website. what should i do in order to keep it safe as possible ?
i tried to install minimum plugins as possible, as i have bought the pro version of wordfence , what can i do more ?
thank you

BBQ Pro and FluentAuth with 2FA on, works well for me on my sites.

On my sites I'm using Sucuri WAF, two-factor authentication (2FA), and blocking access to certain parts of WordPress via httaccess and/or wp-config. So far no issues.