It makes sense that a company like BlackBerry would want to focus primarily on the core OS and features first and tackle smaller things like extrasettings and options iteratively as the platform grows and progresses.
In a blog about the "unscheduled" update, Oracle says it has changed Java's default security settings to "high" which it says means users will be notified of any extra applications which start running while they are browsing.