Not just the server side. 90% of apps I use on desktop today is Java.

That's right, the problem is the plugin that virtually no one uses which, according to Kaspersky, is responsible for at least 50% of infections on Windows (and also gave the Mac world their first widespread trojan, Flashback). It's just a good thing so few people use it. It's not like it ships with some new computers or anything.

I'm not suggesting that the major problems with the Java platform are anywhere other than relating to the plugin, but it's pretty disingenuous to say that no one has it. This time next year though, you might be more accurate.

Now if you mean that there are barely any applets written to use the plugin, then you might be right. But the fact is that a lot of people do have it installed, and it's the malicious applets that people actually are writing that are the issue.