You are absolutely right if we open any kind of wrong link then our password goes to them and everything read in our account. It happened to me once when I was working at axie infinity and the password went to this guy and he took all the stuff out of there. I lost six hundred dollars. I also opened a link that someone sent me. Since then I have never opened any such link and never will.