disable plugins
Just like TorButton, you should probable also disable all plugins.
For example, the Adobe Flash plugin is of no use in Thunderbird.
Plugins introduce new code, complexity, vulnerabilities and I don't see why they should be required. I suggest to block all of them.