I do agree with WPA/WPA2 part.
But, disabling SSID and MAC address control is kind a useless.
It will take same one more minute to crack both hidden SSID and MAC address.
Hell, I think you can do even with backtrack itself.
And if one thinks, it will give trouble to hacker and they will not bother with it. Don't be naive.
It will give more troubles to yourself than supposed hacker...
Both hidden SSID, and MAC address filter will cause more troubles to the user then "security" it will give.
EDIT: here, an old technet article.
Technet already dismissed this myth in 2007, But people still recommend it...
Myth vs. reality: Wireless SSIDs - Steve Riley on Security - Site Home - TechNet Blogs (it talks about MAC filter aswell)
EDIT2: another one form technet library:
Non-broadcast Wireless Networks with Microsoft Windows (scroll down to Why Non-broadcast Networks are not a Security Feature)
EDIT3: now, from technet magazine:
Security Watch: A guide to Wireless Security (scroll down to How
Not to Secure a Wireless Network)
EDIT finished