I know it's just the client side JVM-plugin-whatever but Oracle's behavior isn't really making me want to go out and seek other Oracle products.
Not just the server side. 90% of apps I use on desktop today is Java.
90% of what you run on your computer are Java applets? I call BS.
Java is fine, it's the barely-used-these-days plugin that's the problem.
That's right, the problem is the plugin that virtually no one uses which, according to Kaspersky, is responsible for at least 50% of infections on Windows (and also gave the Mac world their first widespread trojan, Flashback). It's just a good thing so few people use it. It's not like it ships with some new computers or anything.
I'm not suggesting that the major problems with the Java platform are anywhere other than relating to the plugin, but it's pretty disingenuous to say that no one has it. This time next year though, you might be more accurate.
Now if you mean that there are barely any applets written to use the plugin, then you might be right. But the fact is that a lot of people do have it installed, and it's the malicious applets that people actually are writing that are the issue.
You just reiterated my point. It's installed by default when you install Java and should not be. Of those infected, how many actually use the browser plugin? Not many...
Save the whales. Collect the whole set.