I think @SecurityBindingType and @Secures won't be deprecated, I guess, that could indeed break a lot of apps.

However, I just found an issue in DeltaSpike with handling of @Secured on ViewConfigs when defined through stereotype (basically, exactly the implementation I suggested). I'm just investigating the issue, will file it in DS in a couple of minutes. Will post the link here.