If you allow your users to log in as local administrators you have a far bigger security risk. If you don't they can't update java anyway, so the reminders are a nuisance and a constant source of support calls.
Better to turn off auto-update and manage updates though group policy, scripts, third party applications or whatever works best for you.