Why Java Is Robust