> On 3 Aug 2021, at 12:50, Peter Firmstone <peter.firmst...@zeus.net.au> wrote: > > Can you think of any workable alternative compromises?
If you mean a compromise between no access checks in the JDK and all access checks in the JDK, then yes, which is possibly some callbacks for a small subset of operations that perform access checks today, say, System.exit and opening a file or socket. I am not saying this is what should be done, but that the effort involved is such that I can conceivably see those whose responsibility this would be agreeing to consider it, as the value in such a mechanism might end up being worthy of that amount of effort. But I’m guessing that the more such hooks are requested, the less likely it is that the cost remains acceptable. — Ron