> So adding a data-saferedirecturl attribute and using that in the click handler is entirely different.

The end result is the same. Gmail is rewriting url in their web interface. While there isn't enough evidence yet to decide whether they're attempting to do the same for IMAP, the fact that they do it in the web interface is undeniably true.