If you really want to add as many possible layers as possible consider doing the following:
- Do not broadcast your SSID
- Accept only 802.11 G connections
- Use WPA2 (AES+TKIP)
- Setup MAC address filtering on the wireless so that only trusted MAC addresses can connect
- Obviously even when your SSID isn't broadcasted it can still be detected (IE via NetStumbler)
- All devices these days support 802.11 G
- WPA2 I am not sure if it can be cracked yet but WPA can
- MAC's can be spoofed (they are unique between each device, the first few bits are identical between manufacturers) however guessing the exact MAC of your NIC is next to impossible.
If you really want to screw with people then leave your WIFI open/unsecured and have a radius server that you must authenticate to
/ 
