I don't think the author does a good job explaining the security problem, but I believe what they meant is something similar to:

text="foo&sendPasswordTo=hacker" or text="foo&admin=1"

You can imagine a potentially dangerous parameter and value being passed.