There’s no reason a private email server is inherently insecure. If it was properly hardened, it’s a non-issue from a national security perspective.

Hell, given the old tech the government still uses, a private server might be more secure.