Post setup clean up.
Prevent access to include, lang and plugins directories.
Don't index user uploaded images.

Avatars make index poisoning possible.