Agreed!

Whenever i add a new domain to any of our servers i always include a request to htaccess protect the domains stats pages

Not only can they be used by hackers, but your competition to find out what keywords are pulling in traffic for you!!

Regards,

Lee