I'm still not 100% sure yet: the API documentation is very explicit about securityException:
'Thrown by the security manager to indicate a security violation.'.
Would you say that my Data class is a kind of security manager even though it is not an instance of SecurityManager? I could argue this, since the class does 'manage the security' of my database. Also I do think that if SUN really intended securityExceptions to be thrown by instances of SecurityManager only, the exception would not have a public constructor, but still I have doubts: please manage the security of my consciense here
!