You're technically right, if a lot of people use this, the owner of ycombinator1.com will have a lot of info about who shares which URLs and could actually change the redirects to whatever they want.

That being said, it's probably not much of an attack surface given the transient nature of the links.