to extrapolate: if you disable webserver nobody can access it and hence no security risk at all wohooo

obviously refering to the point that all this tight security will result in lot of issues for most users