I will donate to a charity that will directly take cash and not pester me for my name/address etc.
The last thing I want or need is to get on one of the nagging "please give" lists. I give when I can, when I can afford it and to those I think deserve it. Like war veterans left without help by the government or public television.
Write a plugin that downloads arbitrary x86 or arm code from the internet and jumps into it, install it on half the world's browsers, and wait a few months. You could say that that new plugin has only one security issue: it downloads code and executes it, but in practice, its security issues will dwarf those of the Java plugin. It's just very hard to build something that can do arbitrary useful stuff at good speed, yet protects you from those attempting to misuse it. Could that be done better? Nowadays, it probably could, as we can afford to run have in a separate process, and add extra layers of code between the JVM and, for example, the DOM, the filesystem, etc.