A web link is basically a program starter that executes the web browser with the target website as an argument.
Security is definitely something to consider, but I thought the old behavior worked well enough. Newly created or downloaded .desktop files would display the full filename. They only changed to displaying the Name= value if the user gave them executable permission.