How do you improve security when working with Java?

[daniel1348]

I have been exploring Java and wanted to ask people who have tried it in practice.

I am particularly interested in security and performance. I would like to compare approaches that people have actually used rather than just theoretical suggestions.

What has worked best for you, and what would you avoid?