Many people have noticed that Wayfarer asks you to "click Trust to run this applet and allow it unrestricted access to your computer. (Read: "click Trust to yield to hostile invasive forces that will take over your Vista sidebar and reformat your hard drive.") The certificate looks (ahem) "less than trustworthy" with its all-lowercase "sun microsystems."
Unfortunately it is a Sun issue: the libraries in question are the Sun-owned
JOGL (Java OpenGL) bindings. Their certificate expired on May 1, and the problem even affects their own
project demos. Now that Sun is
busy being eaten by Oracle, fixing this might not be their top priority...
Anyway, for what it's worth, Wayfarer won't touch your hard drive, outside of the jre/lib/ext location Java assigns its own JOGL bindings. Not even a cookie in your browser. I'm sorry it's so scary-looking.
Here are some other upset developers.
—Ben