It would be an interesting experiment ditch the Roundcube or any web UI to decrease the attack surface.