Java applets didn't sandbox shit though, because you could call straight into your own native code via JNI (I know because I used exactly that approach to integ

Java applets didn't sandbox shit though, because you could call straight into your own native code via JNI (I know because I used exactly that approach to integrate a Win32 game client into browsers). The only thing that the applet launcher did was asking if it is ok to run the applet.