CIA's pose the safer alternative as they use your Unique System ID instead much like a cart does with it's Private Header, if there are games you are really paranoid going online with. Choose a large SDCard (a 32GB will handle over about 16 games if you stick to Online only ones going to it) and install them as CIA and leave offline games to your Gateway.