I won't pretend I'm some kind of expert on web development, but I think I know what I'm talking about. Of course, removing IPB removes all security issues related to IPB specifically, but I can imagine that because of the time pressure, the new setup might still contain some other weaknesses...