I’ve been hacked before, luckily nothing severe happened but ever since then I’ve taken stuff like this a lot more seriously. Let’s say I use a self hosted Addy instance, a bad actor knowing that my email is for email forwarding could assume I’m running Addy, which uses PHP, try the recent php2shell vulnerability and potentially allow the bad actor to execute commands on my server. I was thinking of a data breach where it may not be obvious or mentioned which service it’s for it could be an issue, but I’m not sure how realistic that is. 🤔 Maybe I’m a bit overly paranoid, but In this day and age of LLMs I don’t think that’s a bad thing.