To reduce your surface of attack with a defense-in-depth strategy, you can disable unused roles. Some roles are activated by default and might not be needed by all users, or might be left activated after a configuration change even if they are not used anymore.