Strange advice from Stanford?

I've been setting up an iis6 server and it's going to need to mail out but no need to receive. I found this advice from Stanford about setting up iis,
http://windows.stanford.edu/docs/IISsecchecklist.htm

and this comment has me flummoxed
" Install only services needed (ftp, www, smtp, nntp). Mailing out does NOT require smtp; use CDOSYS.DLL (a COM based method native to Windows) or a 3rd party executable like blat.exe for web applications that require outgoing mail."

My understanding of CDOSYS is that it still requires the SMTP service of IIS to work - is what Stanford say true????

I think you're right, not Stanford.

That said, I don't use CDOSYS myself, and since the object will generate SMTP conversations it may do internal DNS, and only need to have a chat with the destination mail server. Blat does include SMTP I think.

Somewhere at msdn.microsoft.com is the cdosys documentation, which should answer the question definitively.