Precisely because of that I have "click to play" for all plugins in Chromium. I feel a million times better about it, and it's a very minor hassle.
I'm pretty sure click to play on Chrom* only keeps honest sites honest-- it doesn't prevent a site from activating its own plugin.
Nah. It seems to stop even the sleaziest sites (not that I would know... hah). Jokes aside, one of the major reasons for introducing click to play was to keep those drive-by Java exploits from happening. Not much point if the website can disable click to play :)
What do you need to have a Java plugin installed for these days? I uninstalled it ages ago.
My university has a bunch of stuff in Java applets :( It's really pathetic...