I don't think a popup warning is much protection. Most people really want to see that picture that they think they just received.
If nothing else it'll slightly slow down a worm utilising this exploit...
Second of all, the difference between a 0-click infection and a 1-click infection is huge in terms of time it takes for a worm to spread.