It still probably makes sense to alias it to [email protected] for privacy/security concerns.

I'm not familiar with how you run your company -- without the context you gave most people would hesitate emailing support@ for security issues.