found a bug in protonmail’s native email client. apparently they didn’t sanitise folder / label titles enough so any link starting with http:// or https:// or email address gets hyperlinked and clickable.