Not even that, I'm surprised they don't just encode it into the actual uri and dynamically generate those on share and decode when someone clicks it. I'm not seeing why they need this as a parameter in the query string to begin with.