Efail and PGP - what should I do?
Actually, the threat is fairly low, and in any case, disabling remote content and rendering emails as plain text should be default email settings for anyone even remotely concerned about email privacy and security. HTML emails should be banned. (I usually regard them as spam.)
https://medium.com/@privacyint/efail-and-pgp-what-should-i-do-ccce9c868970