On the other hand, I agree with your argument in regards to security.
Alternatively, you could include in the processed email both the original link (tracked) and the destination. Then, you as a reader can decide if you want to be tracked (and give feedback to the publisher) or not.