The answer is yes, to all of it.

Email providers have better spam filtering, some have strict rules about attaching any kind of executable code to an email (as in - you just can't).

Email clients are always getting updated, stricter about validating content before showing it, etc.