As long as you keep WPA2 settings and don't give out your SSID and PW, prowlers can't gain access. There are scanners that can see hidden SSIDs.
Your FW is behind, you could upgrade and test again to see. It's possible that using WPS and hidden SSIDs may not work.