[Steven]

Instead of commenting out the 'FilesMatch' code in the .htaccess files I was thinking of removing it and then creating a security related add-on containing the uncommented files. As it is, users are unlikely to even look at these files, not to mention uncomment them, so providing a more visible option such as an add-on might be a better approach.