Are HTML downloads safe?

As HTML is not malicious, attachments tend not to be detected by email security products, thus doing a good landing in recipients' inboxes.