I can confirm this. We work a lot with hospitals. When we want to let them try our services behind ngrok domains, they are often blocked. Unfortunately.

Malware abuses them a lot! That's what i meant