Now, Outlook should not execute any attachments unless they are files with the proper image file suffix.
It will still render any in-body HTML it sees, since it uses the IE engine for rendering. I use a third-party add-in which renders rich emails as text. So, for example, I get to see all the one-pixel tracking bugs that companies use to identify you when you read an email.