Your website contains valuable information that should always be protected from unauthorized users and unwanted changes. A smart security step is to protect wp-config.php from direct access. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686