The best thing is to have a host you can trust
(real professionals) and the latest up-to-date versions of the software you want to use, the rest goes by itself. You've stuck with phpBB2 and whatever you've changed in its code doesn't make you above the current risks.

I don't want to open a controversy, I just made an observation about your post and with full awareness.