It is not safe for confidential information. There is the length limitation of url as it is passed with url. so second is length limitaiton

All the attributes and values are visible to the end user. Therefore, they are not secure. There is a limit to URL length of 255 characters.