A very straightforward technical solution is to convert all html emails to plain text (ASCII). Mutt users rarely get phished. :-)