and what sort of security on these local servers?
The exchange has been developed by the developers of Intersango so you can expect the same level of security. As you probably already know, Intersango has never had a single incident with their website and thats the goal of RLCXE as well.
Aren't those the same people who accidentally ran code in a production system making it send just over 500BTC to another address?