In reply to Gary Taylor.

This is generally true and decent advice, however, these are the core themes, and have no known security issues in that respect. Simply having them there is not a risk. Direct access to files is not usually a concern for themes, as the various templates need the underlying WP engine to be running for them to do anything.