I am totally out of the loop when it comes to these things. My client always opens in plain text or html render with JS and external content disabled. I believe this is true for most clients. On the other hand security scanners, browsers engines and other Middleware stuff can trigger such a counter without any user interaction if I am not mistaken.