Qmail does not have a perfect security track record (though AFAIK djbdns does).