On the list of computing tasks I do every day, running my email server is WAY down there on the list of difficulty. Email servers are probably even easier than web servers.
Which doesn't necessarily mean you take necessary steps to seriously protect it. Or may be it means you are an expert and all that is trivial for you. But in general it's clearly not.
