Cloning your site is another level in fix malware problems free that may be useful. Cloning simply means that you've backed up your site to a completely different location, (offline, as in a folder, so as not to have SEO problems) where you can get it at a moment's notice if the need arises.
There are ways to pull this off, and a lot involve copying and FTPing files, exporting and re-establishing databases and more. Some of these are very complex, so it's important that you select the one that is right. If you are not of the persuasion that he said is technical, then you may want to look into using a plugin for WordPress backups.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely see this page more if you make changes and additions to your site. If you have a community of people which are in there all the time, or make changes multiple times every day, a backup should be a minimum.
It's really sexy to fan the flames of fear. That's what journalists and bloggers and politicians and public figures do. It's great for readership and it brings money to the war chests. Balderdash.
Oh . And incidentally, I talked about plugins. Make sure it's a secure one when you get a plugin. Do not install any plugin just because the owner is saying on his website that plugin will help you do this or that. Use a test site to check the plugin, or perhaps get a software engineer to analyze it. This way you'll know it is not a threat for you or your business.