He's talking about the distinction - anybody concerned with privacy should probably be capable of producing or otherwise finding a random username and password.