Update: the next version of pure-ftpd (not the one in Debian 10) will support SNI, which is intended to get round this problem.
Or does Sympl have a clever alternative that I’ve missed?
The question about IMAP and SMTP remains open, but I’m going to try that out now…