A secure WordPress installation includes careful protection of files that control website settings and connections. Many website owners choose to protect wp-config.php for this reason. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686