Considering how my university has this VPN connection things set up for us students to use, I don't really have much choice but to use Java.
Also, my credit union''s online banking makes heavy use of Java. I don't know why, but I can't change that, and I really don't have any say in that matter either.
You can poke fun at me all you want, and say that I need to change banks or universities due to their IT choices, but that really isn't a practical answer.
I do use NoScript. Does that help the situation, or is it a do-nothing warm fuzzy bound to doom me? At least I'm trying to minimize my risk while keeping functionality where I need it.