This thread is about Java 9, which includes the Java Module System aka Jigsaw. The JDK itself was modularized. The API surface is now tiny. It would be easy for chromium to whitelist which are the permissive modules. Applets had a different and inferior security model.