as someone who runs a small competitor to ga4 - yeah a lot of traffic shows up as direct cz sometimes utm params get stripped out by the OS / browser.
if people copy link - they also try manually remove the extra fluff.