java had: * bundled xerces around 1.6, breaking apps that also carried their own xerces * removed sun.misc.Unsafe from v11, breaking legit apps the apps that

java had: * bundled xerces around 1.6, breaking apps that also carried their own xerces * removed sun.misc.Unsafe from v11, breaking legit apps the apps that use off-heap memory * sun and later oracle made everything to make applets useless, creating ridiculous security requirements and no clear way for a user to whitelist trusted applets. same for java web start. they had no problem disabling MD5 and RSA in their SSL impl, breaking the old clients.