I'm discussing with my sysadmin about whether to allow .htaccess files. I noticed all over the EE file tree there are .htaccess files to prohibit access to files, such as to system/user/config/config.php. But they also appear to have built-in direct-access controls, such as:
if ( ! defined('BASEPATH')) exit('No direct script access allowed');
So, .htaccess files a good idea to have on? Using EE 4.3.6.