While the iancoleman script, after properly verifying the downloaded version (check it matches the hash), is a well known one and it's code is tested, you still rely on the correct Javascript implementation of crypto-safe random generator function therein.
It shouldn't be bad, but hardware wallets usually implement better entropy and most of the times also a hardware random number generator.
Then turn on airplane mode so you can genarate a 24 word seed phase safely.
You don't make an online device suddenly safer when you turn off network connectivity. If your device already had malware on it, the malware can still do its evil things and just wait until you turn off airplane mode. That's not a new trick for malware.
Open > bip39-standalone.html with chrome or any other browser.
How about browser extensions? Did you think about those, if you have some? Many browser extension ask for the right to read anything of your web pages. Guess what this means if your iancoleman script generates something that shouldn't be disclosed to "foreign" parties.
Can you trust the code of your browser extensions?
You need to start a safe and best an agnostic (doesn't persistantly store or remember something) environment to create your mnemonic recovery words. Boot a live Linux which only runs in RAM: if properly verified (check hash of the ISO file), it should be safe and when you shut it down, usually nothing remains on your computer (don't forget to write down your mnemonic recovery words on analog paper, no screenshots, no digital files, no upload anywhere).
Proper computer safety isn't convenient and easy, sorry!