I believe that the default behavior should be to never open a link without a confirmation from the user that this may be done.

This should be enough to avoid malicious links. I do not believe that completely disabling links is a good default, because they are very frequently useful when you read some text file in the terminal window.