I noticed a minor bug:
When deleting or disabling a virtual server, Virtualmin should also delete the corresponding entry in /etc/letsencrypt otherwise the letsencrypt script will endlessly try to renew the SSL certificate for the no-longer-active site.
That would be in /etc/letsencrypt/live and /etc/letsencrypt/renewal