Is DWR considered secure, or what may be required to secure Direct Web Remoting?
Are there better options for hardened asynchronous communication?
DWR is reasonably secure if you use it securely. Anything can by made insecure through usage. You still need to validate all your inputs.