I was incorrect about our usage of Java.
It's actually required for MABDA, the Mobile Access Blade Deployment Agent.
It's a cross-platform way to deploy the SNX and Compliance Check components, neither of which use Java.
Previously, yes, NPAPI was part of the equation as MABDA was deployed as a Java-based plugin previously.
Now it is implemented as a Java application, thus why we still need the JDK to be installed.
We are looking at removing the requirement for Java, but don't have a specific timeframe for doing so.