Is this way more secure than using Hook-APIs directly?
What's exactly the Hook-API you meant?

Can this method replace subclassing? Or, in this way, we can avoid subclassing? Thanks!
If you meant array-control events processing then answer - no.