I believe all our file managers show hidden files by default, so files like .htaccess are always visible. Blocking access to hidden files would make no sense, considering .htaccess is technically a hidden file as well, but it’s very important to most websites.