I prefer one token and of course, that will be the utility token. I don't think there is another token needed as named security token, although I am not enough to clear at your point.
It's true for me one token is enough for a one ico or project. That's make you feels like dizzy if their are such more than 2 or 3 tokens in one ico.