Been self hosting email since 2000. Very little maintenance. I lower risk by having less than 5 actual accounts, and of course normal anti spam measures.
This. I self-hosted from the mid-90s until giving up in 2017. My outgoing email was increasingly black-holed by major email providers. I eventually accepted that I would either have to give up on email or pay for hosting. At some level this feels like paying protection money, but there are a lot of things about the internet that don't match up very well with 90s idealism.