She won't take email security seriously enough and will leave the raw attachment there for anyone to pick up.
Even if she deletes the attachment, if she is using a terrible email provider like Google or similar, then the attachment will be backed up unencrypted on dozens of servers around the world, putting any coins at considerable risk.
Sending an encrypted paper wallet by mail and the password via email / phone would be the more secure option.
If asking your friend to create a wallet is not an option, try to at least meet in person to give her the copy of the private key. Yes, you'd better to store a backup copy of the key in case she loses it, because while she'll have to trust you, the risk of losing the key is much higher.
I often see suggestions like this when talking about gifting bitcoin, and I 100% disagree with them. You should not gift pre-generated wallets in any format, regardless of how secure/encrypted they are, because it teaches the person bad habits. If this is their first experience of bitcoin, then right from the outset you are teaching them to trust a third party (you), rather than verify for themselves. They have to trust that you have set up the wallet securely, and they have to trust that you haven't kept a copy of the seed phrase or private key for yourself, or if you have kept a copy "for their own safety" that you have secured it well. The whole process is the opposite of what bitcoin is supposed to be.
Don't trust, verify. Far better to sit down with them, talk them through setting up and backing up their own wallet, and then send some coins to one of their addresses.