Thats the exact reason the cammies use a generic htaccess file and float the directory they need to pull from Exxx! They hate having to try and write complcated ht files to allow themselves to have access and those files can be spoofed by a good linker unless the hoster has things set up right.
Redshoe, look back over the last two days to see the htaccess files. Copy them as a x.txt file, edit, resave, upload and rename to htaccess with no dot anything.
