Anyone wanting to hide a malicious URL could just make it a username-looking hyperlink. That doesn't seem right at all lol