A secure website gives both owners and visitors more confidence when using online services. It is always a good decision to protect wp-config.php because this file contains sensitive WordPress settings. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686