hi, as moritz has pointed out, icedtea-gcjwebplugin gives a viable solution for the secure/Free dilemma, so i've uploaded an NMU that disables generation of the binary package. i've only commented out the relevant lines from debian/control so it should be easy enough to re-enable it again later.
i've also sent it to delayed/5-day, so there's time for review/rejection of the NMU. though if you agree please feel free to let me know so i can speed it up instead. sean
signature.asc
Description: Digital signature