If it isn't deleted, a "Google Dork" like yours can find it. This leads to several critical risks:
You can tell search engines not to index certain folders, though this is a "suggestion" to the crawler and not a replacement for deleting the files. inurl index php id 1 shop install
These scripts often reveal server paths, PHP versions, and database configurations. If it isn't deleted, a "Google Dork" like yours can find it
An attacker could run the install script again, potentially wiping the existing database or pointing the site to a new database they control. If it isn't deleted
This is the most important step. As soon as your shop is live, physically remove the /install or /setup directory from your server via FTP or File Manager.