Good luck proving it was through xenforo that data was written to those directories.
They have .htaccess file inside them as well.
The data is publicly readable, as called within the xenforo app.
If anything is written to it, it's done through another piece of code and called within it.