@molly0xfff "walking onto the premises to setup a server" is a little bit of a weird way of putting it, they wouldn't really need to do that. If some gear was installed in their offices outside of the scope of their IT folks, far more nefarious purposes are likely rather than just an email server...