Because whether you stump up the ??50-per-year tax the antivirus industry hopes to charge you, or take the free version using the same virus-spotting engine, you must never assume your gatekeeper software will have a clue about gaping holes introduced by browser plug-ins such as Java.