I'm wondering why the body of the email doesn't include instructions on how to unsubscribe? Most modern email clients will recognise http and email addresses and make them clickable even in plain text messages. I realise that adds noise to every message, but people are good at skimming past irrelevant bits.
Just adding "To unsubscribe email:debian-security-requ...@lists.debian.org with the subject unsubscribe" at the bottom of every email might halve the noise. Not sure if email clients will do the right thing with subject but "To unsubscribe email:debian-security-requ...@lists.debian.org?subject=unsubscribe " but if they do that might be better. Also if the web unsubscription form could handle addresses of the form https://www.debian.org/MailingLists/unsubscribe/debian-security-announce, and allow people to unsubscribe without needing to pick the right list from a long list an https unsubscription link would also be good. Andrew