Java applets are either greatly limited in capability or have full access to the underlying system.
This is circumventing the applet/plugin paradigm and allowing full Java programs without security being an issue, as they only have access to the virtual system.