java.lang.invoke vs java.lang.reflect, redundancy and security

Hi all. The discussion I had on this list with Duncan about intercepting invokedynamic calls made me wonder: Since Lookup supports an unreflect(..) method, why is there any need for the (backend of the) reflection API at all. The reason I am asking is security: getting security checks is hard and

Re: java.lang.invoke vs java.lang.reflect, redundancy and security

The two APIs are different in that security checks are performed when looking up method handles but not when calling them, while security checks are performed at every invocation of a reflected method or field. I'm sure some security infrastructure can be shared by the two APIs, but I'm not sure ho