It is not ‘just in case’ but ‘just in this case’. I mean, if you know the email origin, ok, you can trust it but iFrame tag is a suspicious in a email.