Security concerns running website in CEP

Hello, 

We would like to render our website in a CEP Extension and are worried about security concerns.

What is the recommended way to render a website in a CEP panel?  Iframe?  Node proxy server?  Something else?

Is SSL through this actually secure? As in, what has access to the page, if anything? We'll want to allow purchasing.