Security or cashing first?

Hi

I am optimizing the speed on my sites. I am using the guide on: https://varvy.com/pagespeed/leverage-browser-caching.html

There I can read:

“It should be added to the top of your .htaccess file.
## EXPIRES CACHING ##
<IfModule mod_expires.c>….” etc.

But is this optimal when i use WP security? Can hackers use this if do not have the WP security options in the top of the .htaccess?

Should i have cashing settings or WP security settings first in my .htaccess?

Please advice. Thankful for tips!

https://ww.wp.xz.cn/plugins/all-in-one-wp-security-and-firewall/