To people writing production software:
Do you actually prevent package access by adding certain packages to
the package.access property of the java.security file, as described
here:
http://java.sun.com/developer/JDCTechTips/2001/tt0130.html
Or do you prefer sealing jar files?
-----
Your response will help in developing a java secure coding standard.