The themes folder is a bether place for the css and js files: the default Drupal robots.txt is allowing the files folder to scan and disallow the themes folder.

Maybe a selector for the admin: themes or files?
The default paths customcssjs/css and customcssjs/js are ok.