Besides the obvious and easily preventable case of someone setting up an open relay, there is plenty of risk associated associated simply with the presence of a SMTP server. The providers out there will require you to setup DKIM, SPF records and have a decent password associated with your account...if you're running the box yourself, this all suddenly becomes optional.