How does the plugin prevent access to .htaccess, .wpconfig, etc. files

If you have an apache-type server the protection of those files is via some .htaccess directives in the “basic” firewall rules.

Thanks!