Self-hosting seems like overreaction for most open source project. I would just make regular backups/exports. Dealing with spam filters etc is a nightmare.

My project is using Google Groups just fine. Do not list your group in public directory to prevent spam.

Redis is moving from mailing list to Reddit. That seems to work for them.