How does the author generates those passwords in a safe way?

Problems:

Experimenting with babies and many other urls could make people laugh, at best, or frown.

If dishonest admins log passwords before hashing them, they could iterate the query string over its domain and check if it works in some other popular site.