Oracle will be required to provide users with a mechanism to uninstall older and vulnerable versions of Java, following a settlement with the Federal Trade Commission. Oracle s stewardship of Java has been scrutinized by the security community, which in 2013 languished through nearly a full year of targeted attacks exploiting zero days and other vulnerabilities in the platform. Oracle has improved the Java user experience by denying unsigned applets the ability to execute by default, and putting security restrictions on what older versions can do.
Source: https://threatpost.com/oracle-settles-with-ftc-over-deceptive-java-security-updates/115689/