[boring_twenties]

No data, but it only listens on localhost by default.

[cnst]

Do you think anyone who changes the default also changes the delivery to Maildir?

(So, at a minimum, it's a local user privilege escalation, of any user to root, in the default install?)