I just tested it on both iPhone and Android and it does indeed remove itself from history and replaces with a link to a weather domain. That’s incredible that it is allowed and I can trivially think of a way to get someone to get to a fake banking site right now, or for that matter, fill the history with a series of visits to domestic violence sites or even worse!
https://developer.mozilla.org/en-US/docs/Web/API/Location/re...
This is known and commonly used -- since 1996. What's the risk? You can't change records about other domains.