This reminds me of that "hackproof" box BBC reviewed that was a Raspberry Pi that couldn't update itself.

Also, having run an email startup in London, patching and anti-spam at almost any scale is nontrivial.