How secure is calling bitcoind JSON-RPC from same computer?
Yes. By default, Bitcoin will only listen for RPC connections on local loopback. Local loopback cannot be accessed or spied upon by another computer.