It is not IAX it is IAX2, they are different and definitely separate protocols. IAX2 works well but few phones support it. Neither are intrinsically secure and you will find instances of perplexed implementors getting hacked on both. There is about the same overhead on an IAX2 and a SIP trunk. (not individual sip connections) depending on your codec of choice.