If you self-host all the same services you have the same exposure level if root on your hosting machine is compromised. I suppose it depends on how confident you feel in how agile you can patch if a vulnerability becomes known in postfix for example. I wouldn’t consider self hosting something that reduces your cybersecurity risk typically