Opera does not execute javascript or plugins in messages nor does it allow frames or other external content. so about the only exploit possible would involve some malformed image file attached to the message. But yes, you can also switch to a List only view to avoid even that.