The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

I’m just going to continue to be happy I don’t know what Hexbear is…

Funny story, before they did the 2007 redesigns, they asked users what they wanted to be added; 95% said features that were already in Office.

The Ribbon was designed to make features more findable.

Alas.