Because all the actions are done via Controllers in Yii, by means of controller filters and some checking in actions, a good security measure can be achieved. For sure this kind of checking is faster than RbAC (if my statements are wrong please let me know).
So when exactly we find out that it's better to use Yii RbAC?