The security approach of Java does restrict what an unsigned applet can do, and those criticisms are fair.
Java restricts what an unsigned applet can do.