Some of Joomla's page can be visited even though there isn't any link to it on the site. One of the infamous examples is when some hacker visits the user registration link even though there isn't any login form on the site. For this we can turn off user registration, but what about other pages?
Some components may have some pages that anyone can visit if they are familiar with the component and know the URL.
This feels like a potential backdoor for malicious users. Is there a common way to prevent this or does this have to be dealt with on a case by case basis?