@ Quavelen - The bug that allowed others to use the id to hijack a forum session was fixed several years ago. It cannot be used to change account settings as those require a new login to access, which creates a new session id.
Yes, it is best to avoid posting website links that include the session id, just in case, but it is not something that requires being hidden.