yes. mail tries to hand it over to the sendmail daemon. So if you dont have it installed and running, it wont work.
If you are worried about sendmail security issues, you may want to try other mail transport agents such as postfix or qmail. Of course - addressing your original concern - that would change the command line. (With qmail, it is qmail-inject for instance)