It seems we're in violent agreement: neither of us think that "just let anybody click and open anything" is a solution.
That leaves us with the robust solution cited earlier: "Don't click on sketchy links".