Opening HTML mail in a browser is risky due to all the scripting possibilities ... Thunderbird's HTML component allows no scripting and disables loading (remote) images (tracking when I hope the mail) how do you deal with that in such a setup? (Actually use evolution, but would like to switch to something smaller ...)

I've banished myself to mobile. I am trying out k9-mail and open keychain on Android. They are both available on f-droid and seem to work well. Open keychain is so much easier to deal with than what I remember of enigmail on the desktop.