Help us to decide

Since Tendoo CMS is evolving, we are discussing about security measures.
Recently, we were discussing about where modules and themes folders should be created, within "APPPATH" or at the root ?

We're facing a huge problem, since tendoo cms should be also a tool for developpers, we did'nt want to change CodeIgniter structure such as editing the root .htaccess provided per default.

But if we didn't do that, modules and theme assets within APPPATH wont be accessible.

What's your point of views ?

NexoPOS 2.6.2 available on CodeCanyon.