Indeed, you have to parse links manually. This is because Decompose is not based on URLs. On the other hand, you automatically avoid security issues like this one:
https://swarm.ptsecurity.com/android-jetpack-navigation-go-even-deeper/
And yes, you have to create the back stack manually as well. I'd assume the same is required with other nav libraries. Otherwise, if I have a link like
domain.com?user_id=123, how would it navigate from user (friend) details back to e.g. my profile screen, and then back to the main screen with e.g. some specific tab opened?