This is very reassuring, thank you! - that's pretty much what I'd worked out about robots.txt, but I never quite trust my own reading in this sort of thing, being as my technical knowledge is somewhat sketchy. Pls to gloss for me: "root" of the site in this instance, does it mean the main directory in which all the html is stored (i.e. alongside the index page), or does it mean one of the higher level directories named like a series of grunts (bin, dev, conf, usr, etc)? Bit of a moot point, I can't find it anywhere anyway, but once again, enquiring minds etc.

One of the things my nice new Bulletproof plugin does is to strip all the automated WordPress indicators, especially version number, which will hopefully put something of a spoke in at least the automated versions of the hacker wheel. (New theory: hackers are like hamsters. Discuss.)