> Having an embedded image from a third party server in an email is well within normal usage of email.

It is "normal" in the sense that it is a common practice, but it's also nefarious and shouldn't be done.

Fortunately, it's easy to defend against.