The path is part of the http protocol. Most firewalls only parse the first couple layers (ethernet->ip->tcp/udp), not http as well, unless they do deep package inspection. Idk if openwrt/banip has functionality like that.
It might be easier (and more performant if the firewall has weak hardware) to just allow tcp port 80 and let your reverse proxy do the filtering for that, since it (usually) needs to parse the http anyways.
Link previews happen if you hold click on a link or choose it in the right click menu. By default it shows pretty much just the title of the page and a banner asking you to enable ai summaries.
It's kinda annoying, but not because of the ai. And you can easily disable it
Bypasses aliases and uses the original command