Can be even worse. Can be a redirection service that requires the corporate SSO.

Or multiple layers of redirection due to multiple layers of corporate "security" tools.

And I'm not making this up.