Enfold Theme Security – File Permissions

Hello,
First of all, love this theme and have purchased many, many times now!

But, I have had several websites built on this theme get hack – php injection – malware…
I have had top tier security review the sites infected and one of their responses was that Enfold theme seems to have loose file permissions that are allowing activity.

HERE ARE THEIR WORDS:
We have looked through the files and the theme enfold has loose permissions. We recommend having a developer look into this theme, to determine which files require 755 permissions and changing the permissions for any file that doesn’t.

Can you please help us with suggestions per file/directory inside of Enfold that will let website run/function but be more secure?

Thanks in advance,
Chris