On: Exim – remote attacker can execute programs with r...

[beefhash]

Debian ships with it. That's why I "use" it.

(I don't send e-mail to the outside or listen for any outside e-mail, so the choice of MTA is irrelevant to me as long as the system can still send over localhost to /var/mail/$USER.)