DoH is good, but it wouldn’t help much in this scenario. Even if every website you connected to supported Encrypted Client Hello, IP addresses greatly narrow down which domains you’re connecting to.

But realistically using DDG to generate a password is safer than downloading a local program to do it, an attacker would have to break into DDG and MITM your internet. For a local program all they have to do is compromise the site you download it from, and maybe the developer’s signing key if you check that.

You might’ve been misled by the preview image, this has nothing to do with filtering pixel art. It’s a really interesting read about how game developers can combat aliasing caused by rasterization, and a new method that’s far more accurate than the alternatives.