What's bad about using them as opaque public ids? The only information that's leaked is approximate time of creation which is moot for most applications.
Things like age of an account/record-in-an-account can help find "higher value" targets and/or "less secure"/"more likely to be currently retired/inactive" targets.
The article goes into a few reasons.
I read it. There's no convincing reason for most applications.