Same, a bit of time invested upfront figuring out all the different tech: dkim, spf, failover smtp, letsecrypt certs (I am using IIS so not trivial plus you want to use those certs for smtp/imap too), log scanning and ip banning, etc.

But not accessible at all to non technical people.