In theory, magic links that are only GET and not idempotent are the issue, not the systems/filters hitting them.
That way, for a "normal human" it works like they expect, is technically correct, and doesn't trigger on backends fetching the resource. Unless they fetch the resource with some headless chrome or such. Which, unfortunately, is rather necessary these days.
Don't do this, most bots now actually load JavaScript.
Still, corporate email belongs to the employer.
For "magic links", It doesn't solve the problem that the email is intended for a specific individual, for one time use, and the filters are not aware or intelligent enough to do so.
In other cases privacy and security of the communication in some cases is being compromised.
It does give rise to a bootstrapped solution that delivers links well so I guess that's good.