Kruhm,
Since you are listening I'll status you. We have the system with 2500 users running and it's pretty successful, but there are two issues at the moment:
A. Logging of POP/IMAP connections - Working with ISPs in the past, (using sendmail) I taught the sys admin' how to read grep the log files and find usernames associated with IP addresses and specific error messages. The take the error message and search in your Knowledgebase or on Google to find some background about the problem. SME doesn't really log much detail about POP connections, or if it does I'm too dense to figure it out. What I'd need? A username matched to an error message... for instance joeblow - invalid password.
B. Overquota Conditions - When a user is over quota his webmail is not visible. Which is strange for an email only user... because they sort of need to delete email in order to get back under quota. Back in the sendmail/mbox land I wrote a script that would rip through the every users email and throw away email oder than 30-days. This is in the ISP's fine print and cuts back on the number of overquota email boxes significantly.
C. Filtering - I'm filtering for Spam and AV inside SME... but there is a special (RedCondor/Barracuda) spam filter in front of the SME that catches inbound traffic. The ISP purchased this when they had a little 1Ghz sendmail server that was having trouble running MailScanner/ClamAV/SpamAssassin. The new system doesn't need the pre-filter, but it's there. BTW: the prefilter queries LDAP for valid users before accepting email and passing it on, so it a nice system, but I think SME would be fine.
In all my one source of pain is the logging. You just get used to solving problems one way, and not having detailed logs makes it difficult.