It’s not totally clear from the evidence but it seems the gmail team are lumping CSS and media queries together with Javascript and phishing attacks as major concerns. Seems odd but there you go. May explain they’re still killing responsive email.

Check out the evidence yourself in the Email Design Podcast #24

I’m hoping the Gmail security guys are clever enough to parse CSS and media queries for security problems and thus make this a non-issue.