Encryption and the link
The message is encrypted before it is shared, and the key needed to decrypt it is bound into the link the tool returns, so the ciphertext alone is useless without it. Whoever holds the link holds both parts, which is why viewing needs no account. The practical rule: guard the link as you would the message, because anyone who holds it can read and destroy the note.