Both are web-based, alternatives to web apps, built with security in mind. I believe IWAs require a browser, while Tauri uses the system WebView. So, if the browser and OS are up to date, neither seems to be at a disadvantage. IWAs use the isolated-app protocol.
That’s about all I can understand from reading the docs above, what are the pros and cons comparing the security of these two services?