I had found an article about putting a blank index.php but still do not think it solves.
An example, if I try to access this address tere will answer with certainty:
https://www.siteexample.com/wp-content/plugins/akismet/akismet.php
There would be no way to directly access the browser when the user is redirected to a 404 page or something that protects access direct.
Thank you for your attention.