It's 2020 and this is still an issue. I know it's convenient to reply to the email instead of opening the app or website, but this makes man-in-the-middle attacks trivial. I really think they should disable this behavior. To respond to a message in Message Center you should have to log in to your geocaching.com account.