Keeping your WordPress website secure requires regular attention to both updates and important files. It is always helpful to protect wp-config.php to reduce possible security risks. https://rankmywp.medium.com/the-one-wordpress-file-that-hands-over-the-whole-site-2427d02cf686