I would suggest you add some kind of security. Maybe just use Security Provider Restrict on the page but don’t allow someone to just change the dynamic_value and see someone else’s order. Forgive me if you’ve already done that.
Yeah, I know how to do routing with parameter and all. I do it all the time. But there is no route picker or or dmx-bind:link attributes in email. Maybe I’m over thinking it again. That happens.