External attacks are only half the story. What about the thousands of employees (especially the SREs) who may or may not be a few clicks away from root access on the machine which contains your email?