"Some of the exploits that target applets also affect running servers."

This would make sense. It's the same reason why php makes apache or ngnix insecure. They are front facing and have access to the OS filesystem and such.

"I didn't mean to imply java was less secure by default"

Okay gotcha. I work with Java quite a bit and was confused by your statement as I thought I missed some major security news.