Comment by Y-bar

> I was surprised to find that it’s not even available as a community plugin.

I found this one https://wordpress.org/plugins/prevent-direct-access/