How to protect wp_config settings ?

Because it’s only setting variables, and not echoing them, it’s completely safe, look at my WordPress wp-config.php file for example…

Are you kidding? A server problem might make this file visible! I have moved mine to a directory below the level accessibible for my visitors and their browsers – safe is safe!
Does WP store sensitive date in any other files?

“Just because I’m paranoid doesn’t mean they’re not after me” ??

Oh but they are !! :p