These files are named with a .config extension since that file type is explicitly protected by IIS, and will not allow remote users to dump the contents of these files in their web browser. This is the same reason that the mojoPortal system log is named .config.
I've always just left these files out of my custom Visual Studio applications, and edit them with a separate text editor, so I don't know if there's a workaround you're looking for.