Pretty wild that a malicious mailto: link might attach your secret keys and files from your PC to an outgoing message