Gilles,
Facebook itself requires cURL. There is no way around this. cURL itself is not insecure, but it can be used to do bad things. It's used on millions of websites though, so just enabling it does not automatically make you insecure.
Unfortunately, if you can't have cURL enabled, JFBConnect and communication with Facebook is impossible.
Alex