Note that it is not just the Decorator base class (which I guess Weld should update to the new one regardless), but the APIs that must be exposed and called to allow the Decorator to be added... and in this case the APIs needed to expose the APIs needed to add the Decorator! We are just uncomfortable with that much private API exposure to a webapp for many reasons.