A reminder of how utterly hopeless is Gmail's security UX

"Be careful with this message. It contains a suspicious link that has been used to steal people's personal information. Unless you trust the sender, don't click on any links or reply with personal information." 1 "Trust the sender"? Gmail omits to identify anything on screen as the sender, so how am I to know? I could guess that the enboldened address is the sender, but it is probably only the fakable From:. 2 "don't click on any link"? Gmail omits to identify links, so even touching the body to scroll can click a link. This is on mobile web version.