Hide Backend uses wp-login

Hi,

I noticed that when i enable the Hide Backend feature my.site.com/wp-login can be used to open the login page. When I test with my.site.com/wp-admin or my.site.com/wp-login.php it shows me the not found page as it should. The URL i have set to replace wp-admin have nothing in common with “wp-login”.

Is this correct behavior? I’ll make more tests with new wordpress installation but if someone have more experience with this i’ll appreciate your advice.

https://wordpress.org/plugins/better-wp-security/