Looking at options for embedding the 3D Secure page inside my own order form, I came across the following:
\"Some commerce sites will devote the full browser page to
IFrame is just an "internal frame". The reason why it can be considered less secure (than not using any kind of frame at all) is because you can include content that does not originate from your domain.
All this means is that you should trust whatever you include in an iFrame or a regular frame.
Frames and IFrames are equally secure (and insecure if you include content from an untrusted source).