Many WordPress security guides recommend protecting configuration files as part of a complete security plan. One important action is to protect wp-config.php to secure your website settings. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686