Is it feasible to relocate the settings file? 

e.g. outside of document root, like the data folder is.

Would this increase protection?

@Roger, that seems to be the most viable solutions, various other sites were suggesting that method.

I assume there is no elgg specfic solutions.?

Hit the settings file directly. What shows up? Nothing. What are you trying to protect against?