Yes because there is still the link confirmation. The best thing to do is just not click any links people send you. You can control links you click, but not images that are shown.

Side note, you can also just add "https://" and "http://" to the question filter and then people cannot!