Yeah, always on a hunt for some security issue :-)
every app gets visits from bots looking for wp-login.php,
even the ones that never had wordpress 😅
commit 1ff84f3
the real test is whether your /.env answers 404,
that's the whole reason laravel serves from public/ 🔥