[Sam Bauers]

For those not using the XML-RPC functionality (95% of you) I strongly recommend you delete xmlrpc.php immediately after install. Several of WordPress’s security issues over the years have been through that API.

Doing that will also disable the ability to receive ping-backs.