WP checkup says defender will auto fix and it is not

WP checkup says Install WP Defender to run a comprehensive hardening check and auto-repair this issue. Both issues are supposed to be automatically fixed by defender and are not being fixed.
Default first WordPress username 'admin' is still used that is the first one XML-RPC Interface available under: http://my-site.com/xmlrpc.php that is the second one in both cases checkup says defender will auto fix and it is not.