In an emergency stop state I disable my line module at the same time as the drives. Is this the best/safest way?

No. The line module should be disabled when all axes have stopped moving. This allows for the line module to regenerate any excess energy that is produced by the motors stopping. A typical example would be to use a delayed safety contact to disable the module after the SS1 delay time has expired.