How hard is it to do your email yourself and make it secure?

For example, adding 2FA to your users, monitoring access, spam detection, etc...?