Running full node mean you help the decentralization and you take a part, it could increase your privacy too. But using SPV wallets don't mean your wallet are get controlled with the central server or someone else. Either SPV or full node, your wallet has a same security.
What's the reason someone create a fake email when it's just remind to withdraw his funds on CEX and not ask him to click anything or send to specific Bitcoin address?