The decision to use java was obviously made by a product manager that doesn't care about creating a competitive user experience. You want to compete with Dropbox then you'll have to make a native client for each of the platforms you choose to support. No silver bullet.
I stopped reading at "Java security flaws are well-known"