It’s definitely not set and forget. In the past year alone there where multiple 0day attacks against Exim and MS Exchange servers.