Cloning your website is just another level in secure your wordpress website that may be useful. Cloning simply means that you have backed up your site to a totally different location, (offline, as in a folder, so as to not have SEO problems) where you can get it in a moment's notice if necessary.
Use strong passwords - Do what you can to use a password, alpha-numeric. Easy to remember passwords are also easy to guess!
Yes, you need to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More. If you weblink make changes and additions to your site, definitely. If you have a community of people that are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
Upgrade now if you aren't running the latest version of WordPress. Like maintaining your door unlocked when you leave for vacation, leaving your site in an old version is.
Of course you can install more plugins to make your store more user-friendly like share buttons or backup plugin. That's all. Your store is up and running!