The Java plugin was a massive attack vector. Hackers frequently used malicious Java applets to install ransomware or spyware simply because a user visited a compromised website.
Mozilla, along with other browser developers like Google Chrome and Microsoft Edge, phased out plugins for several critical reasons: Java plugin does not work in Firefox firefox java plugin