The trouble with security manager is it’s only as good as it’s widespread support.

If it worked, and was widely used, for example, nobody would have had to worry about the possibility of their logging library downloading code from an LDAP server and executing it.