.htaccess's protection is only going to be as good as your password. If you enforce the use of long complex passwords that have to be changed regularly then you'll be fine for the most part.
Check this out for further tips:
Hardening HTAccess, Part One
Hardening HTAccess, Part Two
Hardening HTAccess, Part Three


