Firstly, I just want to make sure what level of basic Mac security is in place.
- Is there an Admin Acct on your Mac?
- Do you and your son share the same or different accounts?
- What type of account do you and your son (if different accounts) use? Admin or Standard type?
From a security standpoint, and I can sense that you are concerned about security as well as the strange Mail behavior, it is best practice to have an Admin Account
but for every day use, the best and safest measure is for both you and your son to each have your own seperate Standard type account.
To install apps or make System changes you will need to supply the Admin Username & Password first so it's very secure.
If you are already following the above practice then next is to make sure that you remove the tick in the box found in:
Safari Preferences ~> General Tab ~> Open 'safe' files after downloading
This adds that extra level of security knowing that if you accidentally download something suspicious, then it won't be opened automatically.
Regarding Bing, if you reset your default search engine to whatever your preferences are, using the pull-down menu in the search field in the upper right hand side of Safari, does it keep reverting to Bing? Is there any particular action that causes this, if applicable?
Are you able to replicate the launching of a new Mail message window so you can tell us exactly which action causes Mail to do this?
Sometimes on a webpage, clicking a link will launch Mail.app and a new message window but there should be an email address showing in the To: field and the message body should be blank, so I think we need a bit more info on exactly what's going on with Safari in the lead up to Mail launching ....