I hope this is not too OT....

Is xp_sendmail still a preferred method of sending out messages from SQL Server?  In some shops I have worked in xp_sendmail is not set up properly, Microsoft security prevents it from being sent (i.e. when you use the command it uses the pop-up confirmation screen), and/or the DBA manager does not want to use it due to a hacker or program gaining control of SQL Server and sending out mail.

Maybe someone could enlighten us on the use of xp_sendmail and how to set it up properly and securely?

I would love to use this script, but the use of xp_sendmail concerns me a bit and maybe someone can give us a few tips.