I will agree that Java isn't safe (like MasterCaver stated which is the answer to believe the most) and C++ has it's areas.

there are always array bounds checks, preventing buffer overflow attacks likewise, you can't access random/uninitialized pointers, in both cases at least not without accessing native code), and many malicious mod download sites will bundle other software with the download or serve malicious ads, rather than as part of the mod itself. That said, you are more likely to get serious malware from a C++ based program since the JVM does prevent a lot of the things that C++ can do (e.g. This is also why you should only ever download mods from trusted sources, like these forums, CurseForge or modders' personal sites (and even then certain mods have had issues with potentially malicious code). Oracle's finally killing its terrible Java browser plugin Java is the biggest vulnerability for US computers

In fact, Java has even been described as the single biggest security vulnerability: Java is not safe there is a good reason why there was so much concern over security back when it was supported as a browser plugin (basically the same thing as a standalone JVM), and subsequently dropped for these reasons - Minecraft can access things outside of the JVM, particularly through native libraries (e.g.

Minecraft mods download no virus