If I could change one thing about Postfix it would be clear guidance on what options / restrictions to use to secure your mailserver. Be it through sane and restrictive defaults that you have to deliberately enable or better documentation or even maybe a guidance document.
The documentation is such a messy maze.
Which smtpd_sender_restrictions and smtpd_recipient_restrictions are you using?
Just checking that I'm doing things right in ze year of 2024