As I understand, it is OK to leave the GPIO2 floating, although it is best practice to pull it up to VCC with a resistor.
The note under the boot mode table probably wanted to say that you should use a resistor rather than making a direct connection to VCC.
But probably due to some unfortunate edits to the sentence, it currently says that leaving GPIO2 floating is dangerous.