Yes, you need to pay for Xbox live, but the Xbox internet service have more secure, Xbox Live staff take a lot care to stop hackers, account steals, bank card steals, way less then ps3 internet service, I heard a lot of account, (bank card) stealing, of it.
The first reason I've chosen xbox, was Halo and the controller, it's very comfortable.