There is an unknown feature of X2 (Legacy) Installer. By writing ID & password on passwd.php, you can protect your installer directory by BASIC authentication. What a relief!
･･･We may recommend this for end-users.
I didn't know this feature! When I check the installer around the topic of extra_languages, I found this feature as it happens.