I was never keen on email clients executing javascript that turns up in email by default

that always looked dangerous