Absolutely. And I'm not using Apache, nginx, or postfix as a result. I'm also using userspace Wireguard, written in Rust.

For services that can't be avoided, I try to limit their exposure. I run Postgres with strictly controlled network access. Same for Redis.