Oracle is now bundling McAfee's scanning tool with Java security patches, with the option to install the scanner checked on by default ...