Remove or properly handle deprecated serialization methods due to security risks

[sfloess]

Java native serialization in StringUtil is deprecated and dangerous. Either remove in v2 or add strong warnings/filters. Align with modern best practices (JSON).