It would be awesome to have a switch that disables clickable links on inbound emails. It would require the user to highlight / right click and copy.

To me this is the most effective form of phishing prevention, just disabling links entirely. Another option would be to open the link confirmation dialog like it currently does, but make the user copy it manually.

It would be nice for business/family accounts to also set the policy at the org level.