Stop using Postfix for transactional email

Postfix has shipped 12 security advisories since 2020 ( source ). Each one needs a patch, a daemon restart, and a smoke test to confirm mail still flows. Twelve interruptions to ship, for a sub-system that exists to do one thing: hand a string to a smarter mail provider 50ms later. If your only outbound need is "send a templated email from a script", you do not need an SMTP daemon. You need a function call. What an "SMTP server" actually does in 2026 For most workloads, the local Postfix instanc