The default spell checker sends everything you type to some remote server
(http://spell.roundcube.net). This is de facto keylogger!

This patch just changes the default settings to disable spellcheck
and set pspell as default (however it requires php7-pspell to be installed).

--- a/config/defaults.inc.php
+++ b/config/defaults.inc.php
@@ -723,7 +723,7 @@
 $config['quota_zero_as_unlimited'] = false;
 
 // Make use of the built-in spell checker. It is based on GoogieSpell.
-$config['enable_spellcheck'] = true;
+$config['enable_spellcheck'] = false;
 
 // Enables spellchecker exceptions dictionary.
 // Setting it to 'shared' will make the dictionary shared by all users.
@@ -737,7 +737,7 @@
 // Since Google shut down their public spell checking service, the default settings
 // connect to http://spell.roundcube.net which is a hosted service provided by Roundcube.
 // You can connect to any other googie-compliant service by setting 'spellcheck_uri' accordingly.
-$config['spellcheck_engine'] = 'googie';
+$config['spellcheck_engine'] = 'pspell';
 
 // For locally installed Nox Spell Server or After the Deadline services,
 // please specify the URI to call it.