Anyone using Sendy?

How do you deal with all the backdoors? I've already firewalled a completely open phpinfo page and a compatibility page leaking all my server info. Who knows what's inside the obfuscated portion. They were leaking my ip I try so hard to hide for cloudflare.

Yes firewall all in is necessary. Outgoing only to Amazon. I don't have a perfect solution. A vm will stop full backdoor.