Let me just share a moment of my personal pain.

In Portugal you fill the taxes in a java application that run in a browser after accepting an invalid security certificate and I always have the feeling that the app as way more access to my computer than it should (saving files is done in a custom interface, not native windows). I'm filled with deep profound sadness and conspiracy theories every single time I have to login to that system.

It is also presented in a web page with a scrollbar and an applet with it's own scrollbars, so it's always a mystery where you'll end up after a mouse scroll.