It can affect security, but the use of .htaccess files in the includes folders are a backstop - in case the server is not set up correctly. Provided the server is correctly set up they are not necessary.

Vger