Smtp isn't that bad so long as you ensure you're not operating an open relay.

Really bad stuff will happen once exploited and it will take major work on your part to undo ranging from getting removed from block lists like XBL to possibly having to renegotiate your ISP contract if they have to get involved.