This stuff that was added recently to recommend blocking certain files. Anyway, this check...
RewriteRule "(^|/)\.(?!well-known\/)" - [F]
I couldn't imagine why a normal user would do that but it turns out that they do. I'm not sure if this rule is enforced in the security check in Moodle or it's just going to be a documentation change.
Anybody know more about this stuff?