> As far as I'm aware the security record of that platform isn't exactly stellar as well and especially older versions are widely reported to be vulnerable to e

> As far as I'm aware the security record of that platform isn't exactly stellar as well and especially older versions are widely reported to be vulnerable to exploits (admittedly usually using applets as a vector here). Yes, historically, there have been major concerns about security of the JVM platform. Applets (which we don't support) have been a big vector. Also, as per my understanding, there was a transition period when Oracle took over the reigns from Sun, during which security patches were not released as frequently as vulnerabilities were discovered. However, the frequency of patches has increased in recent times. Moreover, OpenJDK has emerge as a complete open-source implementation of Java. So, atleast in theory, it should be possible for the community to fix the holes and not rely on a single company.