DSO generally has less overhead, thus is the prime choice for pure performance but in a shared environment you have to weigh that against the potential security risks when not really watched over and suPHP wins there hands down by basically at least limiting any potential damage to a single user's account instead of potentially an entire server.