Please avoid Exim. Even if you can't stomach qmail, which is an acquired taste, you don't have to compromise on security. Smart people can disagree about whether Postfix is _as_ secure as qmail, but none of them disagree that it is at least _very_ secure.