This sounds like a big security flaw in the system that uses access links. Secrets should not be logged (in most cases). When opening a Dropbox/GoogleDocs/OneD

This sounds like a big security flaw in the system that uses access links. Secrets should not be logged (in most cases). When opening a Dropbox/GoogleDocs/OneDrive link, I expect the application not to route them through potentially unsafe CDNs.