> On iOS, Gmail doesn’t let you view full headers, so I had no way to double-check in the moment.

This should be the real highlight of the issue here. I always check headers on my Samsung whenever I feel suspicious.