How we connected React.js to C in an industrial product and everything went ok
belka.us
belka.us
So instead of updating Java, we now have an ecosystem where everyone and their dog are shipping their own bundled Chrom(e|ium) instead, which surely is not going to cause even more upgrade-related problems in the future.
And each install wastes an impressive amount of space.
On the flipside, each program has to maintain the whole stack themselves, and have to push out security updates if necessary. I'm not sure this is an improvement over Java's security situation…
IMHO, in a corporate solution like that described in the OP, 2) makes a lot more sense.