When the security team does that, they give up all right to tell people to analyse URLs, and assume all responsibility for anything bad happening from clicking

When the security team does that, they give up all right to tell people to analyse URLs, and assume all responsibility for anything bad happening from clicking on links. As they're advertising links as secure