The attack surface largely disappears
No login page that is bombarded day and night, no database to inject into, no third-party plug-ins that turn out to have a vulnerability tomorrow. What is no longer there can no longer be misused. That is the biggest security benefit of this step; you can read more about it at website that cannot be hacked.