Currently 'Disable clickable URLs in Message' supports whitelisting of exceptions. If an email contains multiple domain URLs and one domain is matched as exception, all the domain URLs in the email is excepted from _noclick.
It would be more secure if only the domains matching were whitelisted and non-matching domains would be changed with adding _noclick.