The example code in ObjectInputFilter prose does not match the code
with respect to the bootstrap class loader:

"Example, to create a filter that will allow any class loaded from the platform classloader.
     ObjectInputFilter f = allowFilter(cl -> cl.getClassLoader() == ClassLoader.getPlatformClassLoader()
                                          || cl.getClassLoader() == null, Status.UNDECIDED);
"