If nobody should browse your root, simply make the root not browsable.
- Right click /
- Disable Browsable
Now nobody can browse your server anymore. Please note that files still can be downloaded, just not seen. For the hosting of websites, Browsable is not needed.
boco