There was nothing inherently unsafe about Java Applets that could not have been fixed, security was simply not that important in the era for browsers.

I remember applets being used for roll-over buttons on web pages and always knowing that an applet was being used because Internet Explorer 4 hung when loading the page, waiting for the JVM to fire up (with much disk churning).

Kind of nostalgic for it!