Fix error message phpunit.xml files should not be public on demo sites

As mentioned in our team meeting and explained by mudrd8mz , could  this error report/security/index.php?detail=core_publicpaths on our demo sites be fixed, so they set a good example? Thanks.