What should I do, for sequrity reasons? Also, how can I lock/password protect my install category?
You have to delete it because your forum won't work if it's not locked.
You can either delete it from your server or create an empty file called lock .
Absolutely no reason to password protect it, if the install/upgrader didn't automatically lock it, just get rid of it, it's always included in full whenever it's needed.