There should be some sort of acid test as well for email readers, of course.
But, IMO, all of them should be limited to avoid JS use (think of how well some sites are capable of rendering without JS [0])
[0]: https://git-send-email.io/
