To reduce your surface of attack with a defense-in-depth strategy, you can disable unused roles. Some roles are activated by default and not all users might need them. Other roles might be left activated after a configuration change even if they aren’t used anymore.