Plus Java feels like it has a target painted on its back by malware authors these days.