I get so tired of articles confusing running Java on a server and running Java on a web browser via a plugin. The latter is dangerous the former is not. But this is rarely made clear when people write about it.