Indeed. Compare the number of Java vulnerabilities (plugin vulnerabilities included) with the number caused due buffer overflows and such in C/C++.