Java's signed applet based security model is flawed.

You can not expect a non-tech savvy user to have a knowledge for certificate signing. The barrier between the local system and a rouge code is just a click between two buttons (accept or cancel).