Java Features -- It's (Hopefully) Secure

Java opcodes are executed at the client side by Java interpreter which operates exclusively on the virtual memory. Hence, unless there are security bugs in the Java interpreter itself, the model is safe and users cannot create security holes by incorrectly or maliciously written applets.

The byte codes sent across network are verified at the client which prevents evil/corrupted classes from causing problems.