Capability link is forwarded
Why it happens
Anyone holding the URL may exercise its scope.
Potential bug
Unintended recipient edits or downloads data.
Mitigation
Use least scope, short expiry, revocation, optional recipient verification, and never embed excess data.