The login for WP resides on the root, not in a folder. EG yourdomain.com/wp-login.php
Hence its this inherent issue which causes the headaches.
Could probably move it to a folder but would have to hack core files, along with theme files. Both could produce further security issues. Also a right PITA with WP and theme updates.
May also stop some plugins working etc etc.