Sendmail - Is it secure, and really essential?

No, it's not required to have, but you break some things by not having it (like logrotate). It's easier to just use iptables and block the ports.