OTOH, it's probably only a matter of time until someone finds an issue similar to php2shell in the JVM. In which case, well, the level of "we're fucked"-ness will increase to a new level. Until then, sunshine and rainbows.