You can prevent unauthorized access to your htaccess file by adding this rule to the file:

# .htaccess protection

order allow, deny
deny from all
satisfy all