Most web users have an outdated, insecure version of Java running. It’s therefore extremely easy for them to be infected by just visiting a web page. Best way is to uninstall java - if any programs need it - it would pop up message or ask to install. Keep a local install-able copy.