java is shipped by some party, and there are many offerings: AdoptOpenJDK ships them. Note that 'java automatic update' isn't a thing. Various research shows that they suck at their job, so a TRUSTe logo on a site is mostly a sign said company is throwing money at the problem and not actually willing to adhere to standards and laws, but that's beyond the technical nature of Stack Overflow. Basically, they host the cookie compliance stuff, for example. is a service from TrustArc (formerly TRUSTe, hence the domain name) which provides services for websites so that they can manage privacy management processes.
