Some server admins realize their error and add .htaccess password protection later. Others use password-protected indexes for private file sharing among friends or colleagues.