With WP-LOGIN it’s all good, he’s hidden.
But WP-ADMIN is not. If I activate the function Hide Admin (Hide wp-admin folder and its files for untrusted users.) then users can not upload files to the site, but also access to the page sitedomain.com/WP-ADMIN they also will not be.
I performed the actions that you recommend in the post above, but still remains the same.
Either, users can upload images and have access to the page WP-ADMIN or they can neither one nor the other.