1/ how can user object use methode (withoutPassword) that she's not decalred in his class
It's an extension method defined on Class "User", note "this User" in the method signature
2/ if a static methode with xModel type, can be used as a methode for all xModel instance object ?
Yes, I think so, depending on accessibility, static methods also can be invoked from outside...