Most JVM methods can require permissions because it provides built-in POLA ACLs (security policies). The default would likely be to deny network access and fil

Most JVM methods can require permissions because it provides built-in POLA ACLs (security policies). The default would likely be to deny network access and file io. It's more likely that an app itself contains vulnerabilities &| unnecessary weaknesses due to ease of misconfiguration because of the pervasive lack of full-stack implications, grokable and auditable security policies.