Backups play a very important role in WordPress security, but it has some limitations. We have noticed that in many cases, it is weeks before a site owner realizes that his/her website has been hacked.
During this period multiple backups will be taken and there will be a high chance that the files that contain the hack or the Malware are also backed up.
In such a case restoring from backup is not sufficient as it will not clean your website.
Here is where a Malware solution like MalCare comes in. It does regular automated scans of your website and notifies you if there is any sort of Malicious content on your website.