disable XML-RPC by blocking all remote access to /xmlrpc.php in your web server configuration.
I don't use XML-RPC in any of my websites.
I use Nginx as my web server.
I'm not sure what is the best way to totally block XML-RPC. Nginx conf for each site? WP-CLI operation per site?
What is the common way to do so?