Martin Baso, Any directory that contain a default index file, such as index.html, index.php, default.asp, or something similar, can not present its contents via default directory view.
Our routing system works with the conditions and strict rules described in our .htaccess file. These strict rules tell the system to forward the request to the index.php file if somebody requests any site page or link. So as you can see there is no necessity to add any additional security because there is no possibility to open any site content outside of the site context.