Unprotected stats pages are a hacker's tool to get locations of your scripts, userids for member logins, etc. Protecting this info with an htaccess file is an easy defence. If you don't know about htaccess/htpasswd files, chat with your host to get them to set it up for you. It takes just a few minutes to do this, and can save you hours of grief later on.
