system() costs mainly the memory for a shell instance. It's secure when the programmer considers the environement (variables) to be unreliable/hostile.

One has to consider what's more important: simplicity of code (system()) or efficiency (fork(), exec(), ...)