Effect of exposing your system folder

[eluser]GSV Sleeper Service[/eluser]
personally I move the system folder out of the webroot.
most system files contain this line

Code:

if (!defined('BASEPATH')) exit('No direct script access allowed');

which stops anyone from directly accessing the file, but in the event of apache serving up php files as plain text (it happened to facebook about a year ago), anyone familiar with the CI layout could easily grab your database login details.