People are freaking out because Java had a security issue. It isn't "full of security holes" and Oracle has been updating it pretty consistently to make sure there aren't anymore issues.
If you really want to disable those pop-ups, there should be a little check box on it saying not to display the message again.