I hope disabling all the options to limit my VAs is secure for the website

Login under restricted user and try input to the browser a link so any blocked admin menu item. You will see that user can not access it. URE will redirect user to the 1st available admin menu item.

I recommend though, revoke from a role all unneeded capabilities 1st and use admin menu blocking add-on only after that step.