Try setting the default browser - we have a script for it [root tip] [Utility Script] Setting the default web-browser
Never click a link in an email - always verify the link target …
Never open attachments - always be suspicious with attachments …
Clicking links in an email is a high level security risk and a high level privacy risk - emails is often constructed in a way to reveal if the user has read it or opened it - e.g. web beacons and links are likely constructed with a unique identifier so spammers know if a given email is actively read and they are commonly used to spread malware.
Perhaps use Ctrl click - like in a terminal if a link is present or right click the link and choose open.