1. I'd say that the other way around: eBPF has already been hardened in a post spectre/meltdown world (see lkml), and I'm not sure DTrace has had the same level of security attention.

2. That's inaccurate, see the bpftrace docs for uprobes and usdt.