Is it okay to just trust the security tools that come with my web host, or am I supposed to add extra protection myself?