There is not much needed to protect them from accidental ISP initiation, since the reset must be held to do so. ISP will stop if RESET is de-asserted. And it is serial, using the JTAG pins of the device. But that chip is inferior in speed and performance to the similarly priced T89c51rx2 series. It has only 12k code, no internal data eeprom.