Most of the high profile security issues have been either sandbox escapes or serialization issues. The sandbox escapes were made worse by having applets in the

Most of the high profile security issues have been either sandbox escapes or serialization issues. The sandbox escapes were made worse by having applets in the browser. Now that applets are not a consideration any more the sandbox (SecurityManager) isn't used very much anymore and the Java devs are looking at deprecating and removing it, so most of the sandboxing features will go away.