We use a NGINX stack, and it does not allow the use for .htaccess on servers using our platform.
Security headers are added for you on the server level, so you do not have a need for .htaccess, or a WordPress plugin to do that.
If you require access to the wp-config file for WordPress, you can access it via a plugin in your WordPress dashboard, or via SFTP.