People are (even I was) taught Java to believe that if you embrace Java, you no longer have to worry about security, without detailing them on what kind of security problems are alleviated by Java. And Oracle has proved itself highly inefficient when it comes to responding fast with patches.