The hardest parts of email are the bits that have been pasted on after the fact to deal with issues like encryption, spam, and phishing that were't considered from the outset.

You can get self deploying packages that set virtually everything up aside from some DNS records maybe and dealing with the various spam lists that don't like dynamic home IPs.

Email though is just another addressed messaging service, no matter the protocols behind it, if something has the capacity to send mass unsolicited comms, someone will try and abuse that, and someone else will create mechanisms to prevent it, and then we end up with the same complications that email has in the cat & mouse world of controlling junkmail.