In terms of DX, I do not like it.

In terms of security, it's pretty good. I cannot comment on any specific applets like Satochip but the underlying JCOS is solid.