I have a site on WPEngine (on the Advanced Network), running Wordfence Premium.

I'm keen on beefing up the edge security.

Is adding the Sucuri WAF going to improve this meaningfully, or am I better off just signing up to GES?

In light of the PHP CVEs, solutions like Simply Static seem like an attractive option.

Has anybody used them? Thoughts?

Edit: I'm referring to the managed service which has has no public PHP/WordPress runtime, rather than the plugin