The security approach of Java does restrict what an unsigned applet can do, and those criticisms are fair.
Java restricts what an unsigned applet can do.
Python restricts what an unsigned applet can do.