Why remove the Wordpress admin?

Question

Information Security

I read an article on security on Habré:
"Under pressure. We break and protect Wordpress with our own hands"
habrahabr.ru/company/xakep/blog/259843
The article recommends removing the admin:

By default, WordPress assigns each user a unique ID, represented as a number: example.com/?author=1. By sorting through the numbers, you will determine the names of the users of the site. The admin account, which is created during the WordPress installation process, is number 1, so it is recommended to remove it as a protective measure.

So the question is: what is the "protective measure" in removing the admin?
Okay, let's say you deleted an account named "admin". Of course, before that, you will create a second user, to whom you also assign all rights on the site. Now, I go to your site using the link example.com/?author=2, example.com/?author=3 and so on. That is, I identify all users of the site (and the admin and editors). Now nothing prevents me from starting the selection of passwords for the found logins. And I can order a brute from professionals who involve more than one hundred machines in this. So what? So I repeat my question: what is the "protective measure" in removing the admin?

Answer 1

Now, I go to your site using the link example.com/?author=2, example.com/?author=3 and so on.

If a person is worn out over the removal of the admin, then will he really leave those same "author" pages?
We put protection on them from viewing - and let them brute to health)

Answer 2

In my opinion, this is pointless and more like a crutch than a working protective measure. From the same category - name the directory with the admin panel not /admin, but /adminpanel. Dealing with the consequences, i.e. with the weak protection of the core of the system, and not the strengthening of the protection of this very core.
If the system has protection against brute force and DDOS (or a block in htaccess via htpasswd to login \ admin addresses) and the administrator uses good passwords (and not his date of birth, for example), it makes no sense to change or delete any accounts.
WP is a good engine, and there are very good plugins for it, which, for example, block the account for half an hour after 5 login attempts. Yes, and security updates for WP come out quite often.