Well, if someone is poking around looking for a directory of pics, having an index.html page in the directory will cause them to not see the directory. You can also have your host set the default setting on the server so that directory browsing is turned off.
403's should realy only be happening on password protected areas.
404's shouldn't be happening at all
