Is it safe to pass EJBObjects as parameters to remote objects that may be on another machine, or must you use the handle instead?

Yes, it is valid to pass references to remote objects as parameters to methods. The references that you are passing are actually RMI stubs to the remote objects.

Generally, you should use the Handle when holding a reference to an EJB beyond the life of a client process.