what that article is referring to is having the address visible in the page source when viewed in a browser.
When yo enter the to address in Universal Email, it is being set as a server side variable that will not be visible by the client browser. This means that a visitor to your page cant find the to address and start sending spam to that address.