You shouldn't use root to bind to port 25; just the capability CAP_NET_BIND_SERVICE
Exim itself dates from 1995[3].
I'm not really up to date on the use of capabilities, but it would seem that it can be setup before running the main processes anyway[4] using the setcap command (not sure how portable this is on other platforms, eg. BSD's) and it would appear to be a distribution/packaging issue in that context anyway.
There is also always the possibility of setting the port used for SMTP connections to a port higher than 1024 anyway, and using iptables/firewalld etc. to forward port 25 to that unprivileged port, as also discussed in [4].
Of course, neither of these options help in the specific case of needing to access user's home directories, either to read .forward files or deliver mail there directly.
[1] https://stackoverflow.com/questions/413807/is-there-a-way-fo...
[2] https://lwn.net/Articles/266521/
[3] https://en.wikipedia.org/wiki/Exim#Origin
[4] https://security.stackexchange.com/questions/71922/postfix-m...