I read in a lot of places that it is a good idea to block access to the wp-admin folder.
There are even plugins designed for this.
But is it still relevant?
The problem is that each user's profile page is:
So when a newly registered user logs in for the first time the first thing that happens is they are redirected to the profile page and presented with the admin login (which they can't get past).
What to do?