The main weakness I see is that they're still showing the user the generated password. That means the user could reuse that generated password on another site.

The main weakness I see is that they're still showing the user the generated password. That means the user could reuse that generated password on another site. /s I expect a followup thread: "It is for this reason why we neither send you the password, nor ask for it during login."