Personal opinion ... simple is better - 2 ways.
There is an apache setting that will not allow listing of directories.
For example, you find /local/ open to raw listing:
in /local/, issue: touch index.html
That creates a 0 byte (blank) file called index.html - which when someone attempts browsing /local/ will be served up by apache and browser shows nothing.
My 2 cents.