What a truly, truly, truly absurd statement. I run my own webserver and have Roundcube exposed. It's only accessible via my VPN and even then, it's HTTPS. So tell me, how are you planning to compromise that?