Security and privacy

Hi Moodlers

We have an issue that needs some help. Our moodle 2.5 system needs to be hardened down and we need to figure out which websites Moodle calls to and cross-links to.

1. Can you guys tell us which websites Moodle phones home to, and also how to permanently disable it?
2. Whether Moodle phones home to the offical Moodle servers, and what info is passed?
   
3. I recently found the login page links to themes.googleusercontent which we sorely need to disable, since we prefer to do annual of biannual upgrades manually, and on top of this we dont want sych a dependancy on tird party frameworks that are NOT in the code base of Moodle by default and running locally on our server.

Any help is welcome.