What is "ModSecurity" and should it be on?

ModSecurity is a web application firewall (WAF) that protects your site from common attacks like SQL injection. It should always be Enabled. If a specific plugin is breaking, you can whitelist rules in the ModSecurity section.