So if I send such a link by e-mail instead of the password or "secret", it could also be captured and opened by a pirate (if he is the first to open the link), right?

So the whole encryption effort doesn't really achieve anything, or am I making a thinking error?