This appears to be an artifact of Syncthing v1.26.0 enhancement Use a real login screen + sessions instead of HTTP basic auth · Issue #4137 · syncthing/syncthing · GitHub
Clearing cookies for the URL appears to correct the “infinite refresh” behavior.