Unfortunately even "trusted" senders I know often like to use third-parties to handle tracking and analytics and from there you don't really know where it's going to end up.

Of course you might argue that I shouldn't trust people using these services but then I might as well stop using the internet altogether.