A Wired article calls Exchange Server a security liability and it's hard to argue the case that the assertion is incorrect. Too many vulnerabilities, too many attacks, and an architecture that's creaking at the seams means that Exchange on-premises is at the end of its days.
https://practical365.com/time-to-dump-exchange-server/
