You can't have vulnerabilities in code which isn't there. Compared to what I could be using, my ideal stack does not have: class loaders, virtual machines, dep

You can't have vulnerabilities in code which isn't there. Compared to what I could be using, my ideal stack does not have: class loaders, virtual machines, dependency injection containers, web application servers, Log4J, etc.