APM - urls in the email are accessible when I launched though OWA session using access policies

I have come across a APM solution for OWA service where urls in the email are accessible when the client open his email through OWA session-launched using access policies on the APM. Ideally OWA via ...