Disabling XML-RPC, especially with plugins like Limit Login Attempts Reloaded, helps mitigate potential vulnerabilities associated with this feature, commonly exploited in brute force attacks.