Well, then I would disagree with you there. There are plenty of ways to get Windows to run executable code just by clicking an attachment, and this even without

Well, then I would disagree with you there. There are plenty of ways to get Windows to run executable code just by clicking an attachment, and this even without warning dialogs: - PDFs with JS code. It's not a joke, someone actually titled a paper on PDF exploits alone, "PDF, Let Me Count the Ways". - Hostile RTFs (with or without OLEs) disguised as Word documents (which Office will gladly open). - Hostile HTML disguised as Excel spreadsheets (likewise). - New unknown variants of the old Windows metafile exploit (just by viewing, as xorcist suggested). - Image "stegosploits" (likewise). The list goes on...