When moving the mouse over a message containing an hidden link, the real web address is displayed on the bottom part of TB. which is helpfull to identify scam/phishing emails.
But if thunderbird is in his downloading phase, the notifications (downloading message xx from yy server" is at the same place....hiding the other indication....so that you ar not warned anymore....
security and activities notifications should not be at the same place