Every website owner should pay attention to basic security practices to avoid common problems and unwanted access. A good place to start is to protect wp-config.php, as this file contains important WordPress configuration information. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686