I'd assume anything empowered to read+send email from my personal accounts and read+modify my calendars to be security critical.
Use a vps and only give access to what you need.
I guess you're not one of those "Don't worry about it" people
Use a vps and only give access to what you need.