I used this plugin to sync user meta between multiple websites and it works like really well. I was doubtful that the security gets affected by a large number of features this plugin offers, but it seems to offer a whitelist for the incoming data. My problems are solved.