Honestly I'm using Thunderbird only because of two things:
- Plain Text Mode
and
- uBlock Origin Extension is available (that can block also embedded JS)
People underestimate the attack vector of emails. I'm glad those scammers haven't figured out (at least until now) how XSS could work in Gecko with XUL. Heap spraying could easily be a thing, given that MS Outlook also still uses their outdated rendering engine.
- Plain Text Mode
and
- uBlock Origin Extension is available (that can block also embedded JS)
People underestimate the attack vector of emails. I'm glad those scammers haven't figured out (at least until now) how XSS could work in Gecko with XUL. Heap spraying could easily be a thing, given that MS Outlook also still uses their outdated rendering engine.