Well, fair questions. So as mentioned in the footer. The service is powered by scrt.link, which encrypts the url on the client. That means br3f never knows what link you intend to redirect to. Read more on
https://scrt.link/security.
Agree on the email part. Obviously you don't want sensitive information inside emails. But with br3f you have additional security, since a link can only ever be accessed once.