Should I prevent access to .htaccess and wp-config.php files?

Should I prevent access to .htaccess and wp-config.php files?