Not sure that showing them security vulnerabilities in the JVM is going to do much good if they are still in the learning phase.