Anyone wanting to hide a malicious URL could just make it a username-looking hyperlink. That doesn't seem right at all lol
Discussion
Buybuybuy 
There should be an indicator for users. Just show the @ symbol before it.
The full text of a link would be nice too, in addition to the preview. That way I can tell when people are using referral links easily.