Who would use unsafe Java to write "security-critical" software?

What do you mean by "unsafe Java"?? Do you mean Java as a language is somehow unsafe? I beg to disagree - it's one of the most scrutinized platforms you can find and widely used in all sorts of security critical software everywhere.

Java has soooo many security vulnerabilities - just browse around a bit...

That is because it is popular. Any language that was as popular as java for nearly 30 years will have a large collection of problems. Java avoids a large number of possible problems by being memory safe, but it doesn't avoid them all.

"sooo many" is a technical term?

"Sooo many" compared to what? Did you scrutinize the equivalent of Java's SDK in Rust + extra crates to get the same functionality?

Do you include things like unrelated package bugs, like log4j bugs?

I don't think this take understands Java's position, relevance, or the roles it serves. Or even what are the important categories, driving most of software development (it's not enulators, broswers -of which they're just a handful, all in C++, or "basic software" whatever that means).

For starters, Java is by no means used just in "corporateware", if this means some intranet stuff. It's also hugely dominant in server side development (including FAANG) and is used by tons of startups, it's big in banking, high frequency trading, and all kinds of heavy service infrastructure.

That covers the huge majority of programming work, not writing "emulators and broswers" (sic), which is why it's in the top 5 of the TIOBE index.

"GUI libraries" have little to do with, not to mention they're generally irrelevant for most modern programming use cases, which is server/backend or web-based (and where they're not, they're already provided by the host OS and its preferred SDKs).

Also "Hyperbola GNU/Linux"? That yardstick of what's secure?

That doesn't say anything about CVE's and the issues on being not so performant against the new iterations of C# or even PHP >7.

I know that if you were to work in any company, Java would ve everywhere, but today the times changes. Even the Crustacean lang it's preferable againt Java on big backends. On the ligther workloads, Golang works great and it solves the multiplatform issue by crosscompiling from anywhere to anywhere.

These sound like musings based on "coolness factor" and hype, with a very distorted sense of the facts on the ground. Like the kind one gets from reading about various technologies or tinkering rather than actually working with them.

In any case, there's some serious lack of seriousness in the above. I mean, Java "not so performant against the new iterations of C# or even PHP >7"?

JetBrains is valued at $7 billion by the Bloomberg Billionaires Index and they build their popular IDEs in Java... So Java isn't de-ad outside of corporateware...

Java works passably and gets job done over long time. And rust isn't magically fast.

You mean something like arbitrary deserialization? That's a logical bug implementable in any language.

Java libraries with security holes aren't java.

I don't think you understand the words written yourself. At least provide some relevant, convincing examples instead of throwing these claims around.

I bet he understands Java fully but is just joking here to make a debate...

In what context do the words "unsafe Java" even begin to make sense?

1) US Army needs MANY batteries and 2) NSA needs many - especially small - batteries to do their job. Can you imagine how surveillance would spread everywhere if just batteries would be small enough? 3) Germany car industry is HUGE. Why not take some business away from them?