Fair.
That gets to the question of whether it is correct for clients to render markdown in kind 1 at all, and I tend to say it's not correct to do so.
That said, this goes back to the basic rules of the internet: Don't click on hyperlinks from people you don't trust.