You are correct. To allow POP3 and SMTP you will need to open inbound access through your firewall to your Exchange Server. This is safe. Allowing the users to relay through you is safe as long you configure the IMS correctly. If these users areon Exchange server, it is not too much of an issue.
Make sure the Exchange Server running the IMS has SP4 installed.
Allow re-routing on the IMS, make sure the "always allow authenticated users to relay is checked", Under Routing restrictions check the box for From these IP addresses and leave the rest blank. This is allow only your Authenticated Users to send through the IMS. The users should check that their clients can "Authenticate when sending email".
A possible safer way, is if they have a WinNT or Win2000 machine at their office, they can install the IIS Option Pack (NT4) or IIS5 (Win2K) and include the SMTP service. Set the relay permission on the SMTP service to allow relaying from the local machines at that office, and let that box send out the email. This is a good choice, because you help keep you Exchange Server more Secure and now those International users dont have to submit the mail all the way back to you, just to send out an email message.