Important website files deserve extra attention because they contain information needed for your site to function correctly. You should always protect wp-config.php to help keep those settings private. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686