They are almost without exception generated using Javascript security libraries. Proven to be inadequate and with random number generators broken if source of entropy is insufficient. Even people who wrote this sites generating paper wallets got them off the internet and advise they should not to be used. Only worse wallets then paperwallets are brainwallets, but people keep using them both for mysterious reasons.