One bug in an SMTP server can open up the whole machine for intrusion.

The Postfix security model is based on keeping software simple and stupid.

Lack of documentation is becoming a problem for acceptance.

I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.

In a previous life I wrote the software that controlled my physics experiments. That software had to deal with all kinds of possible failures in equipment. That is probably where I learned to rely on multiple safety nets inside and around my systems.

Most of the effort in the software business goes into the maintenance of code that already exists.

For many people my software is something that you install and forget. I like to keep it that way.