I can see how Web Start can be a security hole. There are a few, very few, times where being able to run code on the client is not only useful but the best way

I can see how Web Start can be a security hole. There are a few, very few, times where being able to run code on the client is not only useful but the best way to solve a problem. Is there an easier way to distribute a Java app than Web Start?