It's optionally more secure because you can use Blowfish to encrypt the data in the session. It's not more PCI-compliant, because this approach isn't compliant (which is why it has been removed from the core code).