The comment we are replying to is asking about a situation where there is TLS. Also using clear text values in the URI itself does not mean there wouldn’t be TLS.

What do you mean by any involved network infrastructure? The URI is encrypted by TLS, you would only see the host address/domain unless you had access to it after decryption on the server.

I really like debugging and unravelling old fucked up overcomplicated codebases. I feel like it’s one of the most long term keeps-on-improving-over-decades skills in programming alongside architecture