"But since 2019, nofollow is just a hint!"Link sellers love this argument, so let's take it apart honestly. Yes, in September 2019 Google
changed the model: nofollow stopped being a hard directive and became a "hint" the algorithm may take into account. The rel="sponsored" and rel="ugc" attributes arrived at the same time.
What the sellers usually skip is the next line of that very announcement: in most cases, these links will be treated exactly as before —
not considered for ranking purposes. "Hint" means "Google reserves the right to look at the link," not "nofollow now passes weight." In all the years since the change, no credible study has shown nofollow links from Wikipedia moving rankings.
Bottom line on link equity: it was zero, and now it's zero with a legal disclaimer.
Worse than useless: what the link hunter risksIf a Wikipedia backlink were merely useless, the article would end here. But trying to plant one is actively harmful. Here's what happens to people who try:
The link gets reverted within minutes. Wikipedia is patrolled by thousands of editors and bots. An external link to a commercial site, inserted without an encyclopedic reason, has a life expectancy shorter than the coffee next to your keyboard.
Your domain lands on the blacklist. Wikipedia maintains a global
spam blacklist: if your site keeps getting spammed into articles, the domain goes on the list — and after that, a link to it physically cannot be added to any article in any language edition. Including the perfectly legitimate official-website link in the infobox of your future article. Congratulations: chasing something worthless, you've lost something valuable.
Your future article suffers. Edit history is public and permanent. When you show up a year later to publish a proper article, the reviewer will see your link-building crusade in the logs — and will read your draft with the face of a customs officer who's just been told "nothing to declare."
A special mention for those buying "link placement" from freelancers: you pay for an edit that gets reverted, the domain risk is entirely yours, and by then the freelancer is already selling the same service to the next customer.