The key is sometimes. Plain text by default, rich text when required.

Software that would strip all html out of emails for security would be handy

Before MIME was common, people used to insert uuencoded data within the email message. IIRC, certain email clients would display the decoded content inline with the surrounding text.