Security and privacy

Hi, I don't have the answer, but I have the same question.

In the Moodle's Security Report, appear some .yml, xml and txt files with that warning.  I can not found the 404 returned... only 403.

If someone can help us, please?.
Thanks.