Could you expand on this? What security vulnerabilities does Exim4 have that you'd avoid just by choosing Postfix as an alternative?
Postfix has a very clear separation of concerns and least privledge in the use of lots of helper daemons. Exim4 doesn't not have this architecture and is less secure because of it.