It depends on what your threat model is. If you are a high value target, clicking on a link could definitely get your hacked through a browser vulnerability, e.g. https://blog.coinbase.com/responding-to-firefox-0-days-in-th... and https://www.theregister.co.uk/2016/10/20/alleged_dnc_hackers... .

Most people are probably not worth the effort of this, but I could imagine a source code hosting company could be, as a step to try to compromise some other software...