Actually a plain old IFRAME works fine without extra code if you don't need scraping.
I'm not sure offhand about admin controls. There's a kernel setting for controlling the allowed tags, though the custom portlet code may override that setting.
